Supports the Information Risk Team by translating complex data into clear, actionable reports that inform senior management and decision‑making committees on the Bank’s risk posture and strategy.
Responsibilities
Conducted creditable review & challenge of information security, technology, and cyber risks across the enterprise
Led risk assessments, control reviews, and risk validation activities to identify emerging threats, assess business impact, and recommend effective mitigation strategies
Analyzed enterprise risk data, specifically vulnerability management results, security assessments, and operational metrics to identify trends and strengthen the organization’s risk posture
Developed and maintained Information Risk governance frameworks, including policies, standards, procedures, risk methodologies, and supporting documentation
Produced executive‑level reporting and dashboards for senior leadership, risk committees, and Board committees, translating complex technical risks into concise business‑focused insights
Requirements
Bachelor’s degree (preferred in Finance, Accounting, Business, or Analytics, Computer Science); or equivalent combination of education, training, experience
Lead risk identification, analysis, and reporting for the Information Risk function, translating complex data into actionable insights for senior management and regulatory stakeholders.
Responsibilities
Drive risk identification by proactively analyzing data from enterprise and technical management systems, security scanning tools, and identity management solutions to uncover and track risk trends.
Synthesize and communicate insights by aggregating complex data and generating detailed reports that inform key stakeholders and decision‑making committees.
Deliver actionable recommendations for risk mitigation strategies, leveraging data‑driven analysis to influence business outcomes.
Ensure accuracy and completeness of all risk management documentation and reports submitted to internal and external auditors and regulators, upholding the highest standards of integrity.
Collaborate strategically with business control offices and risk reporting functions to align and deliver timely information risk management reporting.
Supporting independent evaluations of clients’ digital environments, including processes and controls, cyber security measures, data and AI systems.
Compensation
The salary range for this position is: $72,000 - $184,440. For residents of Washington state the salary range for this position is: $72,000 - $212,000.
Responsibilities
Leading IT audit workstreams focused on digital environments, internal controls, and technology-enabled processes
Evaluating IT general controls, cybersecurity governance, access management, and change management activities across client systems
Applying auditing methodologies and testing techniques to assess control design, operating effectiveness, and data reliability
Analyzing ERP security, cloud platforms, data quality, and AI-enabled systems to identify control gaps and risk areas
Interpreting regulatory guidelines, governance frameworks, and compliance requirements to support documented conclusions
The Principal Information Security Engineer – IT Governance & Risk plays a key role in advancing Ferguson’s enterprise cybersecurity risk and governance strategy. This highly visible position leads several critical security programs, including Third-Party Risk Assessment (TPRA), NIST Cybersecurity Framework (CSF) transformation, external security posture management, and cybersecurity risk oversight.
Compensation
$10,594.74 - $18,536.46
Responsibilities
Lead enterprise cybersecurity risk assessments using the NIST Cybersecurity Framework (CSF)
Assess and measure cybersecurity program maturity and find opportunities for improvement
Develop recommendations and remediation plans to address security control gaps and risk exposures
Partner with technology and business teams to improve governance and risk management
Support development and maintenance of security roadmaps, governance processes, and performance metrics
Coordinate cybersecurity governance and compliance activities for IT applications and support application teams in meeting Bosch CD 09000 cybersecurity requirements.
Responsibilities
Coordinate cybersecurity governance and compliance activities for IT applications.
Support application teams in meeting Bosch CD 09000 cybersecurity requirements.
Conduct cybersecurity gap assessments and track identified actions to closure.
Coordinate cybersecurity risk assessments and follow up on risk-mitigation measures.
Support vulnerability and patch management governance, including tracking findings and remediation status.
The role involves translating policies, standards, and regulatory requirements into coordinated cybersecurity activities and measurable outcomes across regions, locations, and business functions.
Provide independent oversight of the Credit Union’s cybersecurity risk, reviewing IT cybersecurity practices and ensuring material issues reach decision makers.
Compensation
A reasonable estimate of the current range for the San Francisco market is an annual base salary of $144,800 to $217,000.
Responsibilities
Independently review IT cybersecurity practices, policies, configurations, procedures, and control effectiveness
Assess IT response to emerging vulnerabilities and threat intelligence
Recommend improvements to IT controls, processes, resource allocation, and remediation plans
Challenge decisions to defer remediation or accept cybersecurity risks
Establish expectations for sharing material cybersecurity information among stakeholders
Requirements
Bachelor’s degree in Information Security, Computer Science or related field
Cyber Risk Mgmt Sr AnalystNewTexas Capital · Richardson, US
Lead National ConsultantIOM · Dushanbe, Tajikistan
Cybersecurity Governance, Risk and Compliance ManagerSF Fire Credit Union · San Francisco, US