Cybersecurity & IT Risk Manager

About the role

The Cybersecurity & IT Risk Manager defines, implements and oversees the organization’s information security strategy, policies, processes and controls. This role protects digital assets, ensures regulatory compliance and prepares the company for incident response while aligning with corporate guidelines and industry best practices.

Key responsibilities

• Develop and maintain the organization’s information security strategy aligned with business objectives and regulatory requirements.
• Design, implement, and oversee cybersecurity policies, procedures, and controls based on standards such as ISO/IEC 27001, NIST CSF, NIST SP 800‑53, CIS Controls, PCI DSS, HIPAA, SOX, GLBA and CCPA.
• Define and monitor cybersecurity KPIs, metrics and executive dashboards; promote security awareness across the organization.
• Identify, assess and manage cybersecurity and technology risks; coordinate internal and external audits and ensure compliance with privacy and data‑protection regulations.
• Lead incident response activities, coordinate communications with stakeholders, and develop resilience and recovery strategies.
• Prepare executive reports, mentor cybersecurity personnel and support change‑management initiatives.

Required profile

• Minimum 5 years of experience in information security or cybersecurity leadership roles.
• Proven experience in risk management, regulatory compliance, incident response and cybersecurity project management.
• Demonstrated ability to lead teams and coordinate cross‑functional initiatives.
• Bachelor’s degree in Information Systems, Engineering, Computer Science or a related field.

Required skills

• Strong knowledge of NIST Cybersecurity Framework (CSF).
• Familiarity with NIST SP 800‑53.
• Understanding of ISO/IEC 27001.
• Experience with PCI DSS, HIPAA, SOX, GLBA and CCPA requirements.
• Knowledge of CIS Controls.