Risk Manager, Cybersecurity Risk

Build and maintain the technology risk register, including improvements to tooling and increased automation

Conduct cybersecurity risk assessments across production and corporate environments, enabling security and other technology delivery teams to describe risk in quantitative and qualitative terms and to develop a broader understanding of the intent, objectives, and activities of cyber threat actors

Uplift Box’s technology risk methodology (experience with the FAIR model is a huge plus)

Identify and report appropriate metrics to measure the success of the cybersecurity risk program and highlight trends or themes

Influence behaviors to reduce risk and foster a strong technology risk management culture throughout the enterprise

Minimum of 5 years of relevant experience with risk program work including assessment, reporting and remediation planning and tracking activities in cybersecurity/information security/technology risk management at a technology company

Practical experience with risk or other industry regulatory frameworks (NIST CSF, FAIR, COSO, COBIT, NIST 800-53, etc)

Experience with implementing or uplifting core program elements (e.g., cybersecurity risk assessments, cybersecurity risk methodology and technology risk register)

Strong collaboration and relationship management skills, including experiences in executive relationship management

Experience with cloud computing environments a huge plus