Apply Now

Senior Cyber Risk Management Engineer

• Posted 3 hours ago • Updated 3 hours ago

Full Time

Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

Dependability
IT Risk Management
IT Risk
Security Controls
eXist
Collaboration
Threat Analysis
Risk Management
Training
Professional Development
Recruiting
Business Analysis
Business Analytics
Mergers and Acquisitions
Risk Assessment
Analytical Skill
Problem Solving
Conflict Resolution
Lifecycle Management
Access Control
Management
Testing
Cyber Security
Risk Management Framework
RMF
Operating Systems
Documentation
Dashboard
Reporting
Trend Analysis
Presentations
Stakeholder Management
IT Security
Leadership
ISACA
CISSP
Identity Management
Information Security

Dependability
IT Risk Management
IT Risk
Security Controls
eXist
Collaboration
Threat Analysis
Risk Management
Training
Professional Development
Recruiting
Business Analysis
Business Analytics
Mergers and Acquisitions
Risk Assessment
Analytical Skill
Problem Solving
Conflict Resolution
Lifecycle Management
Access Control
Management
Testing
Cyber Security
Risk Management Framework
RMF
Operating Systems
Documentation
Dashboard
Reporting
Trend Analysis
Presentations
Stakeholder Management
IT Security
Leadership
ISACA
CISSP
Identity Management
Information Security

Summary

A position at White Cap isn't your ordinary job. You'll work in an exciting and diverse environment, meet interesting people, and have a variety of career opportunities.

The White Cap family is committed to Building Trust on Every Job. We do this by being deeply knowledgeable, fully capable, and always dependable, and our associates are the driving force behind this commitment.

Job Summary

Responsible for providing expertise in implementing and maintaining cybersecurity risk frameworks, including NIST CSF ( National Institute of Standards and Technology Cybersecurity Framework) and NIST RMF (National Institute of Standards and Technology Risk Management Framework). Assess, review, and help identify areas where security controls do not exist currently.

Major Tasks, Responsibilities and Key Accountabilities

Conduct thorough and regular risk assessments to identify and evaluate potential threats and vulnerabilities related to critical infrastructure. Develop and maintain cyber risk-based statements and scenarios to enhance risk register capabilities.
Identify, track, and report on Cyber Key Risk Indicators.
Collaborate with cross-functional teams to ensure the integration of security measures into organizational processes and systems.
Stay updated on emerging cyber threats and industry best practices to enhance risk mitigation strategies. Conduct threat intelligence monitoring and reporting as needed.
Lead the implementation of comprehensive cyber risk management strategies and risk monitoring.
Perform annual assessments of operating system security baselines.

Nature and Scope

Identifies key barriers/core problems and applies problem-solving skills in order to deal creatively with complex situations. Troubleshoots and resolves complex problems. Makes decisions under conditions of uncertainty, sometimes with incomplete information, that produce effective end results.
Independently performs assignments with instruction limited to the expected results. Determines and develops an approach to solutions. Receives technical guidance only on unusual or complex problems or issues.
May oversee the completion of projects and assignments, including planning, assigning, monitoring and reviewing progress and accuracy of work, evaluating results, etc. Contributes to employees' professional development but does not have hiring or firing authority.

Work Environment

Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions, there may be a need to move or lift light articles.
Typically requires overnight travel less than 10% of the time.

Education and Experience

Typically requires BS/BA in a related discipline. Generally 5-8 years of experience in a related field OR MS/MA and generally 3-5 years of experience in a related field. Certification is required in some areas.

Preferred Qualifications

REQUIRED: 5+ years of cybersecurity experience conducting risk assessments, identifying security gaps, and recommending mitigation strategies.
REQUIRED: Strong analytical and problem-solving skills, with the ability to communicate complex technical issues to senior IT leaders and non-technical stakeholders.
Experience with identity and access management (IAM), identity governance and administration (IGA), and Privileged Access Management (PAM) processes and platforms.
Knowledge of access governance, least-privilege principles, privileged account lifecycle management, access reviews, role-based access control, and security exception management.
Hands-on experience conducting information security assessments, application control self-assessments (SC1/SC2), control testing, and remediation tracking.
In-depth knowledge of NIST Cybersecurity Framework (CSF) and Risk Management Framework (RMF), with a strong ability to apply these frameworks to organizational security practices.
In-depth knowledge of operating systems and security baselines, including CIS Controls and CIS Benchmarks, with experience assessing technology configurations and documenting control gaps.
Experience administering Risk and Control Self-Assessments (RCSAs), maintaining risk and control documentation, validating evidence, and coordinating with risk and control owners.
Ability to collect, validate, reconcile, and analyze security data; develop key risk indicators and operational metrics; and investigate missing, incomplete, or inconsistent information.
Experience producing security dashboards, program reporting, trend analysis, and concise executive-level presentations for monthly leadership reviews.
Strong written, verbal, and stakeholder-management skills, with the ability to communicate control issues clearly to business, technology, security, and leadership audiences.
Preferred certifications: CRISC (ISACA), CGRC ((ISC) ), CISSP ((ISC) ), or comparable governance, risk, access management, or information security certifications.

If you're looking to play a role in building America, consider one of our open opportunities. We can't wait to meet you.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 80183860
Position Id: b167ac9d76ff310dc0a611d89dc4f214
Posted 3 hours ago

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Cyber Risk Mgmt - Sr Professional

Berkeley Heights, New Jersey

•

6d ago

Calling all innovators - find your future at Fiserv. We're Fiserv, a global leader in Fintech and payments, and we move money and information in a way that moves the world. We connect financial institutions, corporations, merchants and consumers to one another millions of times a day - quickly, reliably, and securely. Any time you swipe your credit card, pay through a mobile app, or withdraw money from the bank, we're involved. If you want to make an impact on a global scale, come make a differe

Full-time

USD 90,000.00 - 144,000.00 per year

Senior Manager Cybersecurity

Charlotte, North Carolina

•

Today

Important Application Submission Information In order to ensure your application is successfully received before the job posting expires, please submit your application by 11:59 PM on Sunday, August 23, 2026 More than a career - a chance to make a difference in people's lives. Build an exciting, rewarding career with us - help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and

Full-time

Principal, GRC Cyber Risk Management

Tempe, Arizona

•

5d ago

About Northern Trust As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world's most successful individuals, families, corporations and institutions. Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we

Full-time

USD 108,965.00 - 185,155.00 per year

Cyber Risk Data Engineer/Analyst

Arlington, Virginia

•

Today

Technomics is a growing employee-owned, decision analytics company that specializes in cost and economic analysis to facilitate better decisions faster . We enable a wide range of clients across the Federal government, from senior level policy makers to program managers, to choose smartly, buy effectively and operate efficiently. We deliver practical, credible and defensible results offering actionable insights by applying data-driven and analytics-based approaches in combination with multidisci

Full-time

USD 70,000.00 - 115,000.00 per year

Search all similar jobs