- Company Name
- JCW Group
- Job Title
- Cyber & Information Risk – Independent Risk Review Manager (VP)
- Job Description
-
**Job Title**
Cyber & Information Risk – Independent Risk Review Manager (VP)
**Role Summary**
Lead independent assessments of the organization’s cybersecurity and data management controls, identify risks and control gaps, challenge remediation plans, and provide concise, evidence-based insights to senior leadership, audit teams, and regulators. Facilitate governance forums, mentor junior analysts, and contribute to strengthening the firm’s risk and control environment.
**Expectations**
- Conduct rigorous, unbiased reviews of cyber and data risk controls in a large, highly regulated setting.
- Ensure remediation actions are adequately tracked, validated, and closed, with clear documentation and evidence.
- Present findings and recommendations to executive leadership, audit committees, and external regulators.
- Support ongoing governance activities and serve as a mentor to emerging risk professionals.
- Demonstrate deep knowledge of industry frameworks, regulatory requirements, and best practices in cyber risk management.
**Key Responsibilities**
1. Design and execute independent reviews covering key cyber and data risk areas.
2. Identify control deficiencies, assess impact, and recommend remediation plans.
3. Monitor remediation progress, verify closure evidence, and update risk logs.
4. Prepare and deliver executive‑level presentations and reports for audit, governance, and regulatory bodies.
5. Lead governance forum discussions, facilitating cross‑functional collaboration.
6. Train, supervise, and develop junior risk team members, ensuring high‑quality work standards.
**Required Skills**
- Strong analytical and investigative skills, with ability to assess complex controls and risks.
- Proficient in risk‑assessment frameworks such as NIST, ISO 27001, CIS Controls, and relevant regulatory mandates (e.g., FINRA, SOX, GDPR, CCPA).
- Exceptional communication and presentation abilities, delivering concise, actionable insights to executives and regulators.
- Ability to build relationships across technical and business functions, influence decision‑makers, and drive remediation momentum.
- Project management expertise: prioritizing multiple initiatives, meeting strict timelines, and maintaining accurate documentation.
- Experience mentoring and developing junior risk professionals.
**Required Education & Certifications**
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Business, Risk Management, or related discipline.
- Minimum 5 years of progressive experience in cyber, data risk governance, operations, or risk management, preferably in large, highly regulated financial services.
- Professional certifications preferred: CISSP, CISM, or CISA.
---
New jersey, United states
Hybrid
Senior
14-01-2026