Remote - Security Manager (Risk and Governance) | Cyber Security | Cybersecurity
Role: Senior Security Manager (Risk and Governance)
Location: Austin, TX – Remote
Duration: Long term
Rates: DOE
Prefer US Citizen or Green Card holders (Unfortunately client is not sponsoring fopr this opportunity for this time)
Description:
• Define end to end governance workflows for:
• Risk identification and intake
• Risk review and validation
• Risk acceptance, mitigation, or transfer
• Ongoing monitoring and periodic reassessment
• Establish roles and responsibilities for risk owners, reviewers, and governance bodies.
• Design escalation and reporting processes for high risk and accepted risks.
• Engage key stakeholders across business, technology, security, and governance functions to validate risk requirements and workflows.
• Facilitate working sessions or workshops to socialize the risk register and governance processes.
• Support onboarding of initial risks into the enterprise risk register.
• Produce clear, audit ready documentation covering:
• Risk register structure and data definitions
• Risk scoring methodology
• Governance workflows and decision authorities
• Provide knowledge transfer to designated security staff to ensure sustainability beyond the contract term.
The contractor shall provide the following deliverables during the engagement:
• Enterprise Risk Register Framework
• Standardized risk register template and taxonomy
• Risk Scoring and Prioritization Model
• Documented likelihood and impact scales
• Scoring methodology and prioritization logic
• Risk Governance Model
• Defined workflows for risk intake, review, acceptance, and monitoring
• Roles and responsibilities matrix
• Initial Population of Risk Register
• Initial set of documented risks reflecting current cybersecurity and technology risk posture
• Final Documentation Package
• Consolidated guidance and operating procedures for ongoing risk management
Apply tot his job
Apply To this Job
Location: Austin, TX – Remote
Duration: Long term
Rates: DOE
Prefer US Citizen or Green Card holders (Unfortunately client is not sponsoring fopr this opportunity for this time)
Description:
• Define end to end governance workflows for:
• Risk identification and intake
• Risk review and validation
• Risk acceptance, mitigation, or transfer
• Ongoing monitoring and periodic reassessment
• Establish roles and responsibilities for risk owners, reviewers, and governance bodies.
• Design escalation and reporting processes for high risk and accepted risks.
• Engage key stakeholders across business, technology, security, and governance functions to validate risk requirements and workflows.
• Facilitate working sessions or workshops to socialize the risk register and governance processes.
• Support onboarding of initial risks into the enterprise risk register.
• Produce clear, audit ready documentation covering:
• Risk register structure and data definitions
• Risk scoring methodology
• Governance workflows and decision authorities
• Provide knowledge transfer to designated security staff to ensure sustainability beyond the contract term.
The contractor shall provide the following deliverables during the engagement:
• Enterprise Risk Register Framework
• Standardized risk register template and taxonomy
• Risk Scoring and Prioritization Model
• Documented likelihood and impact scales
• Scoring methodology and prioritization logic
• Risk Governance Model
• Defined workflows for risk intake, review, acceptance, and monitoring
• Roles and responsibilities matrix
• Initial Population of Risk Register
• Initial set of documented risks reflecting current cybersecurity and technology risk posture
• Final Documentation Package
• Consolidated guidance and operating procedures for ongoing risk management
Apply tot his job
Apply To this Job