ITA - Cybersecurity (EIS and IAM) Business Unit Risk Manager (BURM)

$160,000 - $211,000/Yr

Mitsubishi - Jersey City, NJ

Full-time - Senior

Jersey City, NJ

10,001+ employees

Transportation Equipment Manufacturing

About the position

The Cybersecurity Business Unit Risk Manager (BURM) will lead and oversee the first line of defense risk management for Enterprise Information Security (EIS) and Technology Engineering (TE) teams within Information Technology for the Americas. This role is critical in developing, implementing, and maintaining a robust risk management strategy that safeguards the firm's assets, information, and reputation. The BURM will report directly to the Information Technology Business Unit Risk and Control Officer (BURCO) and will be responsible for ensuring that the risk management practices align with the firm's business objectives and regulatory requirements. The ideal candidate will possess a deep understanding of cybersecurity threats, regulatory requirements, and industry best practices. They will have a proven track record of leading teams in a complex and fast-paced environment, demonstrating the ability to communicate effectively with both technical and non-technical stakeholders. The BURM will work closely with key partners, including the Chief Information Security Officer (CISO), independent risk teams, internal audit, and external regulators, to ensure a comprehensive approach to risk management. In this role, the BURM will execute a comprehensive risk management strategy, provide expert guidance on emerging risks, oversee the implementation of policies and procedures, and lead the identification and prioritization of cybersecurity risks across the organization. The BURM will also be responsible for building and leading a high-performing risk management team, mentoring team members, and fostering a culture of continuous improvement and professional growth within the organization.

Responsibilities

• Execute a comprehensive risk management strategy aligned with the firm's business objectives and regulatory requirements.
• Provide expert guidance to key partners on emerging risks and their potential impact on the business.
• Oversee the implementation of policies, standards, and procedures to manage and mitigate cybersecurity risks.
• Communicate risk issues and strategies to non-technical stakeholders effectively.
• Lead the identification, assessment, and prioritization of Cyber related risks across the organization.
• Ensure on-time remediation of issues and exceptions, appropriate escalations and collaborative solutioning.
• Implement risk management frameworks and methodologies to assess and mitigate risks effectively.
• Collaborate with the CISO, independent risk, and audit teams to ensure compliance with relevant cybersecurity regulations, industry standards, and best practices.
• Build and lead a high-performing risk management team.
• Mentor and develop team members, fostering a culture of continuous improvement and professional growth.
• Collaborate with other technology and business leaders to promote a risk-aware culture across the organization.

Requirements

• Bachelor's degree in Computer Science, Information Security, Business Administration, or a related field; Master's degree or relevant professional certifications (e.g., CISSP, CISM, CRISC) preferred.
• Minimum of 10-15 years of experience in cybersecurity or risk management, with at least 5 years in a leadership role within a large financial institution or similar environment.
• Extensive knowledge of cybersecurity frameworks, risk management methodologies, and regulatory requirements (e.g., NIST, ISO 27001, FFIEC).
• Strong understanding of financial services industry regulations and compliance requirements.
• Excellent leadership and team management skills.
• Strong analytical and problem-solving abilities.
• Exceptional communication and interpersonal skills, with the ability to influence and collaborate with senior executives.
• Ability to thrive in a fast-paced, dynamic environment with a high degree of complexity.

Benefits

• Comprehensive health and wellness benefits
• Retirement plans
• Educational assistance and training programs
• Income replacement for qualified employees with disabilities
• Paid maternity and parental bonding leave
• Paid vacation, sick days, and holidays