Information Security Manager 3 | Enterprise Risk Management (ERM)

Job Description

• The ideal candidate for this role is a seasoned Cybersecurity and Enterprise Risk Management (ERM) Consultant with at least 8 years of specialized experience designing, standing up, and operationalizing risk frameworks from scratch.
• They are strategic yet hands-on leaders capable of bridging business, technology, and security functions to define end-to-end governance workflows, risk scoring models, and escalation matrices.
• The right person excels at stakeholder facilitation, running workshops to socialize new processes, and onboarding initial risks into a standardized register.
• Furthermore, they bring exceptional communication and documentation skills, ensuring that all frameworks, taxonomies, and operating procedures are audit-ready while providing seamless knowledge transfer for long-term internal sustainability.

Required Skills

• Experience with Risk Register Design and Framework
• Experience with Risk Scoring and Prioritization Model
• Experience with Governance Processes and Workflows
• Experience with Stakeholder and Enablement
• Demonstrated skill with documentation and knowledge transfer