Cybersecurity Engineer 3

Key Responsibilities

• Facilitate cyber risk acceptance and risk awareness discussions with senior leadership and business stakeholders.
• Translate technical cybersecurity risks into clear business impact and risk narratives.
• Develop executive-level presentations, dashboards, and reporting materials.
• Maintain and manage the enterprise cyber risk register.
• Track remediation activities, risk treatment plans, and risk acceptance decisions.
• Perform qualitative cyber risk assessments, including likelihood and impact analysis using scenario-based methodologies.
• Evaluate control effectiveness and compensating controls.
• Provide risk-based recommendations to stakeholders and leadership teams.
• Support the enhancement and maturation of the cyber risk management program.
• Contribute to process improvement initiatives and cyber risk governance activities.

Required Qualifications

Education & Experience

• Bachelor's degree and 5+ years of experience in Cyber Risk, IT Risk, Information Security Risk, or a related discipline.

OR

• 7+ years of relevant cyber risk, IT risk, or information security risk experience without a degree.

Required Skills

• 5+ years of experience in Cyber Risk Management, IT Risk, or Information Security Risk.
• Consulting or Big Four experience is highly valued.
• Strong executive communication and presentation skills.
• Ability to communicate technical concepts in business risk terms.
• Experience managing risk registers and remediation tracking activities.
• Strong understanding of cybersecurity controls, systems, and risk scenarios.
• Ability to work proactively, independently, and collaboratively with stakeholders.
• Experience contributing to risk program development, governance, or process improvement initiatives.

Qualifications

• Experience with qualitative cyber risk assessment methodologies.
• Knowledge of FAIR (Factor Analysis of Information Risk).
• Familiarity with cybersecurity frameworks such as ISO 27001, NIST, or similar standards.
• Experience using ServiceNow IRM or other GRC platforms.
• Professional certifications such as:
• CISSP
• CISA
• CISM
• CRISC