Cybersecurity Risk Manager

About the role

We are partnering with a global organisation to find a Cybersecurity Risk Manager who will provide second‑line oversight of cyber risk across multiple international operating entities. The role is remote‑first, with travel required to support audits and stakeholder meetings.

Key responsibilities

• Provide second‑line oversight of cybersecurity risks, controls and remediation activities across multiple operating entities.
• Identify gaps through proactive reviews and technical assessments ahead of audit activity.
• Analyse cybersecurity data and platforms to determine root cause, severity and business impact of risks.
• Assess the effectiveness of preventative, detective and responsive security controls.
• Review areas such as identity and access management, infrastructure, network security, endpoint security, cloud and OT environments.
• Evaluate security architecture, privileged access, segmentation and vulnerability exposure.
• Support internal audit activities, control validation and remediation tracking.
• Review outputs from penetration testing, vulnerability assessments and other security exercises.
• Track recurring risk themes and systemic control gaps across the organisation.
• Work with global stakeholders to promote consistent risk management practices and improve cyber maturity.

Required profile

• Proven experience in cybersecurity risk, assurance, audit or technical security assessment roles.
• Strong analytical, problem‑solving and stakeholder management skills.
• Ability to work independently in a global, decentralised environment and influence without direct authority.
• Understanding of audit processes and experience working with internal or external auditors.
• Familiarity with frameworks such as NIST, CIS Controls or ISO 27001 is beneficial.

Required skills

• Identity and Access Management (IAM)
• Active Directory
• Network security and infrastructure
• Endpoint security
• Cloud security
• Vulnerability management
• Penetration testing
• Security architecture assessment
• Privileged access management
• Network segmentation