Manager Security Compliance and Risk Management

About the role

We are seeking a senior leader to own and operate our enterprise technology and security risk management program. The role partners with business and technology stakeholders to provide pragmatic, risk‑based guidance that enables decision‑making while safeguarding the organization.

Key responsibilities

• Develop and maintain the risk register, including identification, scoring, tracking and periodic review of cyber‑risk items.
• Lead the risk exception and acceptance process, ensuring proper documentation, approvals and timely reviews.
• Drive escalation, investigation and remediation of security risks across the enterprise.
• Manage, coach and grow a team of security engineers, setting priorities, delegating work and maintaining capacity for audit, compliance and continuous monitoring activities.
• Produce risk dashboards, KPI reports and compliance posture summaries for senior leadership and the board.
• Translate audit findings and control gaps into actionable remediation plans for technical and non‑technical audiences.

Required profile

• 6–8 years of progressive experience in information security compliance, risk management or IT audit with program‑level ownership.
• 2–3 years of people‑management experience, including performance management and hiring.
• Proven ability to influence business decisions and communicate risk concepts clearly.

Required skills

• Deep, hands‑on knowledge of GRC (governance, risk, compliance) disciplines.
• Experience with risk identification, scoring, tracking and risk register maintenance.
• Strong background in IT audit, compliance frameworks and control governance.
• Ability to produce metrics, KPIs and dashboard‑level reporting for senior stakeholders.