Position Details

Salary $126K – $190K USD / year

Type Not Specified

Experience mid

Exp. Years 5+ years

Education Not Specified

Category Cybersecurity

About this role

Manager for Technology Risk and Cybersecurity Risk Management focusing on vulnerability management and controls across IAM, cloud, and Gen AI security in an insurance environment.

Key Responsibilities

Oversee vulnerability management program
Validate remediation timelines with tech owners
Track KRIs and metrics
Align with NIST/ISO/COBIT frameworks
Liaise with 2nd and 3rd lines of defense

Technical Overview

Emphasis on risk frameworks (NIST, ISO), vulnerability lifecycle, cloud security, and GenAI security; leadership across 2nd/3rd lines of defense and regulatory exams.

Ideal Candidate

The ideal candidate is a senior technology risk professional with 5+ years of cybersecurity/risk management experience, deep knowledge of vulnerability management, IAM, and cloud security, and familiarity with regulatory frameworks.

Must-Have Skills

5+ years of formal Technology Risk or Cybersecurity Risk Management experienceStrong background in Cybersecurity and Vulnerability ManagementControls and risks aligned to IAMCyber OperationsData securityCloud Securityand Gen AI Security

Nice-to-Have Skills

Insurance industry or financial services experienceExperience supporting regulatory examsinternal auditsand external assessmentsAutomation and AI to improve cyber risk processes

Tools & Platforms

NIST CSFNIST 800-53ISO 27001COBIT

Required Skills

Technology RiskCybersecurity Risk ManagementVulnerability ManagementIdentity and Access ManagementCloud SecurityGen AI SecurityNIST CSFNIST 800-53ISO 27001FAIRCOBITThree lines of defenserisk metricsKRIsrisk reportingregulatory examsInternal AuditCISSPCISMCRISCCISA

Hard Skills

NIST CSFNIST 800-53ISO 27001COBITrisk managementVulnerability ManagementIAMCloud SecurityGen AI Security

Soft Skills

leadershipinfluencestakeholder managementcommunication

Certifications

Preferred

CISSPCISMCRISCCISA

Industry & Role

Industry Insurance

Job Function Oversee enterprise technology risk and cybersecurity risk management, ensuring alignment with frameworks and regulatory expectations.

Role Subtype GRC Analyst

Keywords for Your Resume

Technology Risk ManagerCybersecurity Risk ManagementVulnerability ManagementIdentity and Access ManagementCloud SecurityGen AI SecurityNIST CSFNIST 800-53ISO 27001FAIRCOBITThree lines of defenserisk metricsKRIsrisk reportingregulatory examsInternal AuditCISSPCISMCRISCCISAinsurancehartfordthree lines of defense

Apply for this Position →

Get matched to jobs like this

Luna finds roles that fit your skills and career goals — no endless scrolling required.

Create a Free Profile