🛠 Tech Stack

💼 About This Role

You'll lead enterprise information risk assessments to ensure alignment with frameworks like HITRUST, NIST, and PCI-DSS, collaborating with architecture, engineering, and compliance teams. Your expertise will drive mitigation strategies and strengthen organizational resilience.

🎯 What You'll Do

• Lead information risk assessments through stakeholder interviews and control analysis.
• Evaluate risk scenarios including likelihood, impact, and mitigation effectiveness.
• Communicate risk findings to technical teams and senior management.
• Maintain and update enterprise risk registers with accurate scoring.
• Monitor remediation activities and ensure timely progress.

📋 Requirements

• 7–10+ years in information security, risk management, or cybersecurity governance.
• Strong knowledge of NIST, HITRUST, PCI-DSS, or ISO 27001.
• Experience conducting risk assessments and developing mitigation strategies.
• Familiarity with enterprise security technologies like firewalls, DLP, SIEM.

✨ Nice to Have

• Familiarity with AI governance and secure AI adoption.
• Certifications such as CISSP, CISA, CEH, or GSEC.

🎁 Benefits & Perks

• 🏖️ Fully remote work arrangement
• 💰 Competitive salary range $94,200–$151,000 annually
• 📈 Career growth in information security and compliance leadership tracks
• 🏥 Comprehensive benefits including health, dental, vision, and retirement plans
• 🎓 Professional development and certification support

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter screen· 30 min
2. 2Technical interview· 60 min
3. 3Hiring manager interview· 45 min