Manager Security Compliance & Risk Management

About the role

The Manager, Security – Security Compliance & Risk Management leads the enterprise-wide risk and compliance program. You will act as a trusted advisor to both business and technology stakeholders, ensuring that security risks are identified, assessed, and mitigated in a timely manner.

Key responsibilities

• Own and operate the technology and security risk management program, including risk identification, scoring, tracking, and maintenance of the risk register.
• Lead the risk exception and acceptance process, ensuring proper documentation, approvals, and periodic review.
• Drive timely escalation and resolution of cybersecurity risks across the organization.
• Manage, coach, and develop a team of security engineers, handling performance management, career growth, and hiring.
• Produce metrics, KPIs, and dashboards for senior leadership, summarising risk posture, compliance status, and control effectiveness.
• Support the CISO in preparing board and executive committee materials on security and compliance programs.

Required profile

• 6–8 years of progressive experience in information security compliance, risk management, or IT audit with program‑level ownership.
• 2–3 years of people‑management experience, including performance management and team development.
• Proven ability to build audit‑ready cultures and drive continuous improvement.

Required skills

• Deep hands‑on knowledge of GRC (governance, risk, and compliance) disciplines.
• Expertise in risk management, security compliance, and control governance.
• Experience with risk registers, risk scoring, and risk exception processes.
• Strong ability to translate audit findings and control gaps into actionable remediation plans.