FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in leading global risk management processes, including risk assessment, treatment planning, and reporting. Proficient in translating regulatory changes into actionable controls and automating workflows to enhance risk management efficiency.
Highest-signal resume keywords
Risk Management FrameworksNIST Cybersecurity Framework (CSF)Risk Metrics and ReportingGRC ToolingControls Assurance
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Risk AssessmentTreatment PlanningThreat Intelligence AnalysisControl Operation AnalysisPolicy Exception ManagementAutomation of WorkflowsControls Effectiveness Testing
Soft Skills
Strong Written CommunicationStrong Verbal CommunicationAbility to Simplify Complex Requirements
Tools & Technologies
GRC ToolingAgentic AI Workflows
Industry Keywords
Security RiskGovernance Risk and Compliance (GRC)Risk AcceptanceRisk ReportingBusiness Controls
Tech Stack
Tools & technologiesCyber Security
About the role
Key responsibilities & impact- Lead the global risk management process, including risk assessment and treatment planning
- Negotiate treatment plans with risk and control owners
- Translate regulatory and framework changes into working controls
- Analyze day-to-day control operation and threat intelligence
- Manage policy exceptions through compensatory controls or risk acceptance cases
- Own risk reporting for security or engineering areas
- Serve as a key risk contact and help reduce risk measurably
- Collaborate and report within GRC and security teams and across the business
- Build automations and help shape team strategy and tooling
- Run risk assessments and reporting
- Support exception requests
- Help automate tooling and processes for an accurate risk register
- Deep-dive into business controls, identify issues, and proactively address risks
- Report to the Senior Security Risk Manager on the GRC team in the Security organization
Requirements
What you’ll need- 4+ years of experience in security risk, GRC, or a related field
- Bachelor's degree in a technology-related field, or an additional 4 years of work experience in a technology-related field
- Fluency in risk management frameworks, including the NIST Cybersecurity Framework (CSF)
- Ability to translate technical risk for technical and non-technical audiences
- Strong written and verbal communication skills
- Ability to turn complex control requirements into clear, actionable guidance
- Experience owning risk metrics and reporting
- Experience automating workflows, or interest in agentic AI workflows
- Experience implementing or using GRC tooling (nice to have)
- Experience with AI-related risk (nice to have)
- Experience in controls assurance and effectiveness testing (nice to have)
Benefits
Comp & perks- Equity grants
- 401(k) plan with employer matching
- 16 weeks of paid parental leave
- Wellness benefits
- Commuter benefits match
- Paid time off
- Paid sick leave
- Medical, dental, and vision benefits
- 11 paid holidays
- Disability insurance
- Basic life insurance
- Family-forming assistance
- Mental health program
- Flexible paid time off/vacation for salaried roles
- 80 hours of paid sick time per year for salaried roles
- Wellness expense reimbursement
- Premium healthcare