Overview:
In this role, you will lead enterprise cyber risk initiatives for a hospitality client and act as a subject matter expert in risk management. You will shape and mature the organization’s first-party risk program, working with security, technology, and business teams. You will tackle complex risk scenarios, drive mitigation plans, and ensure alignment with industry frameworks. This position offers impact across governance, risk, and operations with opportunities to influence security posture at scale.
Responsibilities:
Lead enterprise cyber risk initiatives and serve as SME for risk management Act as senior escalation point for complex risk issues Partner with security, technology, and business stakeholders to gather and refine requirements Translate requirements into actionable tasks and align with milestones Apply Agile and Waterfall methodologies as appropriate Provide regular status updates and executive-level summaries Facilitate cross-functional project meetings and ensure clear communication Manage release schedules and change control compliant delivery
Key requirements:
5+ years in Cybersecurity and Cyber Risk Management 3+ years of Program Management leading cross-functional initiatives Hands-on experience managing first-party cyber risk programs in a corporate enterprise Deep understanding of qualitative cyber risk assessment methodologies Experience as Cyber Risk SME and senior escalation point Ability to gather, document, and refine business and technical requirements Experience translating requirements into actionable tasks and tracking milestones Proficiency in Agile and Waterfall frameworks Experience with risk identification, analysis, prioritization, and remediation planning Regular risk reporting through dashboards and executive summaries Experience facilitating project meetings across cross-functional teams Knowledge of change control and compliance processes NIST, ISACA, and CRISC certifications strong collaboration and stakeholder management clear and effective communication leadership and facilitation qualitative risk assessment methodologies risk identification, analysis, prioritization, remediation Agile and Waterfall project delivery