Senior Information Security Risk Manager

About the Role

Our client, a well-established financial services firm, is seeking a remote-first Senior Information Security Risk Manager to bolster their cybersecurity program. This role is instrumental in identifying, assessing, and mitigating information security risks across the organization. You will be responsible for developing and implementing a comprehensive risk management framework, ensuring compliance with regulatory requirements, and fostering a risk-aware culture. This is a critical leadership position within a globally distributed team, offering the chance to significantly influence the company’s security posture. The position is based in East London, Eastern Cape , but the role is entirely remote.

Key Responsibilities

• Develop, implement, and manage the information security risk management program.
• Conduct regular risk assessments, including vulnerability and threat assessments, to identify potential security weaknesses.
• Analyze and prioritize security risks, recommending appropriate mitigation strategies and controls.
• Ensure compliance with relevant industry regulations, data privacy laws, and internal policies.
• Develop and maintain risk registers, security policies, standards, and procedures.
• Collaborate with business units and IT to integrate risk management principles into daily operations.
• Monitor and report on the effectiveness of security controls and the overall risk landscape to senior management.
• Lead the response to security incidents by assessing their impact and contributing to remediation efforts.
• Promote security awareness and best practices throughout the organization.

Requirements

• Master’s degree in Information Security, Risk Management, Computer Science, or a related field.
• 7+ years of experience in information security, with a strong focus on risk management, governance, and compliance.
• In-depth knowledge of risk assessment methodologies, security frameworks (e.g., ISO 27001, NIST CSF), and regulatory requirements (e.g., POPIA, GDPR).
• Experience in developing and implementing comprehensive risk management programs.
• Strong analytical and problem-solving skills, with the ability to translate complex risk information into actionable insights.
• Excellent communication, presentation, and stakeholder management skills.
• Relevant certifications such as CRISC, CISM, CISSP, or CRISC are highly desirable.
• Experience in the financial services industry is a significant advantage.

Benefits

• Attractive annual salary package up to ZAR .
• Comprehensive health, life, and disability insurance.
• Generous vacation policy and flexible remote working hours.
• Opportunities for advanced training, professional development, and certifications.
• A key role in shaping the security risk strategy of a major financial institution.
• Fully remote work arrangement with potential for international collaboration.

#J-18808-Ljbffr…