Lead, Information Risk Management

Position Summary

We are seeking a highly skilled and experienced Information Risk Management Lead to join our Global Information Security (GIS) team risk assessments and risk management team. The ideal candidate will be responsible for identifying, analyzing and mitigating information security risks across the organization, possessing deep expertise in cybersecurity and information risk, with a proven track record in conducting application and third-party risk assessments.

Essential Duties and Responsibilities :

• Lead and support the execution of comprehensive information security risk assessments for IT systems, applications, and processes, identifying risks and issues.
• Prepare documentation and support compliance assessments related to information security and risk management frameworks, ensuring adherence to regulatory requirements and standards (e.g. SOX, GDPR, HIPPA, PCI-DSS).
• Work closely with BISOs, broader security team, IT and business to promote risk awareness and facilitate risk mitigation strategies.
• Interact and collaborate with key personnel in various departments including, but not limited to, Procurement, IT, Legal, Compliance, Human Resources, Internal Audit, etc.
• Review and analyze security contract language to align with information security policy.
• Collaborate across teams to embed the best practices in risk management, automate processes, and continuously improve our security posture.
• Lead the ongoing enhancement of the organization’s Information Risk Management program, ensuring alignment with business objectives, regulatory requirements, and industry standards.
• Perform application and third-party risk assessments for enterprise systems and vendors across the organization, overseeing the end-to-end process for identifying, assessing, and prioritizing cyber risks with junior risk analysts.
• Develop and implement effective risk mitigation strategies, controls, and best practices.
• Drive the creation of insightful risk assessment reports and dashboards tailored for senior management and stakeholders, providing actionable recommendations to reduce risk exposure.
• Collaborate with the Senior Manager to develop and deliver targeted training programs that elevate the risk literacy and assessment capabilities of the risk team.
• Identify opportunities to automate risk management workflows and compliance processes within GRC platforms, implementing controls that enhance operational effectiveness.
• Support GRC Policy Manager with updates to security policies and standards to reflect changes in the threat landscape, regulatory requirements, and industry best practices.

Qualifications :

Power Skills :