Manager, Cybersecurity, Quantitative Risk

As a Manager Cybersecurity Quantitative Risk you will lead the development and application of quantitative methods that measure model and communicate cybersecurity risk across the enterprise. You will partner with Cyber GRC Cyber Strategy Security Operations Enterprise Risk Management Finance and business leaders to inform investment priorities control effectiveness cybersecurity strategy and executive risk reporting.

What you will do:

Lead enterprise cyber risk quantification initiatives and establish a consistent measurable view of cybersecurity risk exposure.

Translate quantitative risk insights into recommendations for executive leadership and governance forums.

Partner across security technology finance audit compliance enterprise risk and business functions to support risk-informed decisions.

Technical Responsibilities:

Develop and maintain quantitative cyber risk assessment methodologies risk models and scoring approaches.

Measure and analyze cyber risk exposure across business units products technologies and third-party environments.

Perform scenario-based risk analyses loss estimation Monte Carlo analysis and control effectiveness evaluations.

Apply FAIR or similar methodologies to cyber risk quantification initiatives.

Develop cyber risk dashboards key risk indicators quantitative reporting capabilities and executive reporting mechanisms.

Evaluate cybersecurity investments and remediation initiatives through risk reduction analyses.

Conduct emerging risk assessments and trend analyses involving cyber threats vulnerabilities and control environments.

Support regulatory audit governance and cybersecurity strategy requirements through quantitative risk insights.

Knowledge and Capabilities:

Apply cybersecurity frameworks risk management principles statistical modeling and governance processes to enterprise risk analyses.

Synthesize complex quantitative information into concise communications for executive and senior leadership audiences.

Prioritize concurrent analyses reporting needs and deadlines while maintaining consistent risk measurement practices.

What You Need:

Required Qualifications

Bachelors degree in Cybersecurity Risk Management Statistics Mathematics Data Science Information Systems Finance Engineering or a related discipline.

Minimum 8 years of professional experience in information technology or cybersecurity.

Minimum 5 years of experience in cybersecurity risk management quantitative risk analysis enterprise risk data analytics or a related discipline.

Experience conducting cyber risk assessments and control effectiveness evaluations.

Experience developing risk models risk scoring methodologies quantitative reporting capabilities and using data analytics or visualization tools.

Preferred Qualifications

Training in quantitative risk analysis statistical modeling enterprise risk management or cybersecurity risk management.

Experience with FAIR Monte Carlo analysis risk modeling techniques or similar methodologies.

CRISC CISSP CISM FAIR Financial Risk Manager (FRM) or equivalent certification.

United States of America Pay Ranges:

• USN: $135600 - $225900 USD Annual
• US5: $142400 - $237200 USD Annual
• US10: $149200 - $248500 USD Annual
• US15: $155900 - $259800 USD Annual
• US20: $162700 - $271100 USD Annual
• US30: $176300 - $293700 USD Annual