Cybersecurity Engineer

About the role

The Cybersecurity Engineer will lead cyber risk acceptance and awareness discussions with senior leadership, translating complex technical risks into business‑focused language for executive decision‑making. You will own the enterprise cyber risk register, conduct qualitative risk assessments, and evaluate the effectiveness of security controls.

Key responsibilities

• Facilitate cyber risk discussions and risk‑acceptance meetings with leadership.
• Perform qualitative risk assessments and analyze risk scenarios.
• Maintain and update the cyber risk register and remediation tracking activities.
• Evaluate control effectiveness and document risk‑treatment recommendations.
• Prepare executive presentations, reports, and risk dashboards.
• Collaborate with cybersecurity, IT, audit, and compliance stakeholders.
• Contribute to cyber‑risk program improvements and governance initiatives.

Required profile

• Bachelor’s degree with at least 5 years of experience in cyber risk, IT risk, or information security risk (or 7 years without a degree).
• Strong ability to communicate technical risk to non‑technical senior leaders.
• Experience with FAIR, ISO 27001, NIST Cybersecurity Framework, and GRC platforms.

Required skills

• FAIR (Factor Analysis of Information Risk) methodology.
• ISO 27001 standard.
• NIST Cybersecurity Framework.
• ServiceNow IRM or other GRC platforms.
• Cyber‑risk quantification methodologies.
• Professional certifications such as CISSP, CISA, CISM, or CRISC.

What we offer

• Hourly rate of $67–$68 (USD) with overtime eligibility.
• Full‑time benefits package including medical, dental, vision, 401(k) match, paid time off, and various insurance options.
• Opportunities for executive exposure and influence on enterprise‑wide cyber risk management.