Manager, Cybersecurity Risk Management

Manager, Cybersecurity Risk Management

Location:

Burbank, CA (Hybrid schedule: 3 days onsite)

• Develop and maintain a comprehensive cybersecurity risk management strategy aligned with business objectives.
• Lead enterprise-wide risk assessments and remediation activities.
• Collaborate with IT, legal, compliance, and business units to ensure risk mitigation strategies are embedded in operations.
• Monitor emerging threats and risk posture and activities accordingly.
• Present risk analysis, metrics, and mitigation plans to management and stakeholders.
• Identify risk and mitigating controls for risk exceptions based on adherence to relevant company policies, standards, baselines, and industry standards (e.g., GDPR, PCI, SOX).
• Mentor and develop junior risk analysts and cybersecurity professionals.
• Ensure effective identification, quantification, communication, and management of technology risk, focusing on root cause analysis and resolution recommendations.
• Develop and maintain robust relationships, become a trusted partner with technologists, assessments teams, and stakeholders to facilitate cross‑functional collaboration and progress toward shared goals.
• Proactively monitor and evaluate risk exceptions and risk register processes, identify gaps, and recommend enhancements to strengthen risk posture.
• Assist Info Sec teams in developing and maturing their risk exceptions rejection and approval criteria.
• Drive adoption of enterprise‑wide risk assessment methodologies, frameworks, and tools.
• Collaborate with key stakeholders to enhance risk governance and ensure compliance with internal and regulatory requirements.
• Assist with the administration and maintenance of the Service Now GRC platform.
• Display and utilize advanced understanding of relevant SDLC methodologies, practices and compliance policies/procedures to assess risk exceptions criteria.
• Utilize prior experience in multiple IT disciplines and confirmed understanding of solution architecture, complex application systems design and platform integrations and various tech stacks during assessment of risk.

• Translate risk insights into strategic decisions and enterprise‑wide policies.
• Communicate effectively with leadership and stakeholders.
• Contribute to the design of cybersecurity strategies by advising on risk reduction priorities related to exception and risk register trends.
• Develop metrics to track exception remediation rates, approval / review rates, aging, and SLA compliance.
• Drive initiatives that reduce recurring exception requests through enterprise‑wide solutions.
• Engage with application, cloud, and infrastructure teams to promote remediation and risk ownership.
• Foster collaboration across business units to ensure alignment between risk mitigation and delivery priorities.
• Accountable for organizing and participating in, and/or leading meetings with various stakeholders across the company, and across the globe.
• Technical and experienced professionals who will ensure data and evidence meet remediation expectations and regulatory or policy requirements.
• Responsible for tracking tasks and projects, assessment status, and are able to effectively communicate risks and overall status to your management in a timely manner.
• Stay abreast of existing and upcoming projects to effectively plan your work.
• Make updates to the centralized risk exceptions list, issues log, and other key team documents, ensuring accuracy, attention to detail, and overall status.
• Assist in updating metrics and status updates on a regular basis for your Manager.
• Ability to partner with other team members, contribute to building a positive team culture, learn internal processes, and contribute to building effective deliverables.

• Monitor the effectiveness of the risk exceptions process in accordance with agreed upon metrics and performance measures to drive continuous improvements.
• Conduct root cause analysis on recurring issues to enhance process efficiency and reduce exception requests.
• Collaborate with cross‑functional teams to gather, interpret, and validate mitigating controls to ensure accuracy and relevance.

• 8+ years…