Akkodis is seeking a Security Risk Manager for a Direct Hire job with a client located in Chicago, IL or Seattle, WA OR California (Remote/Hybrid-onsite).
Pay Range: $120,000 to $150,000; The salary may be negotiable based on experience, education, geographic location, and other factors.
LOCATION DETAILS:
Hybrid in Chicago or Seattle—two days per week in office
OR
100% remote OK for any Pacific or Mountain time zone states.
What you'll do:
The Security Risk Manager is responsible for conducting security risk assessments, monitoring mitigation activities, and reporting while contributing to critical initiatives to enhance, scale, and mature the Security Risk & Issue Management program for DocuSign. This hands-on individual contributor position will mature relationships with internal and external partners globally to represent the team and report security risks including risk mitigation strategies. The successful candidate will have a proven ability to drive consensus and direction to multiple cross-functional collaborators while consistently completing quality deliverables, tracking risks and issues, and proactively communicating progress.
This position is an individual contributor role reporting to the Director of Risk Management.
Responsibility:
- Identify, assess, monitor, and report risks with minimal supervision.
- Triage risks to accurately assess and capture them within the GRC tool.
- Conduct security risk assessments, reassessments, and mature processes to effectively manage and mitigate cybersecurity risk at scale.
- Conduct targeted risk assessments based on the DocuSign framework as well as industry requirements.
- Lead cross-functional meetings with stakeholders with minimal manager supervision.
- Support and enhance the risk and issues reporting metrics.
- Integrate the Risk and Issue program across the DocuSign processes and effectively measure the. effectiveness of the integrations.
- Support documentation, review, and enhancement of the risk management standard, methodologies, policy or operating procedures.
- Evaluate mitigation and remediation efforts including the design and effectiveness of operational controls, based on industry best practice models by risk and compliance requirements.
- Manage and enhance the risk reporting metrics.
- Engage with the stakeholders to identify risks, and understand their needs and challenges to proactively find ways that your program can support.
- Develop and maintain strong relationships based on trust and transparency with primary business partners and third-party contacts.
- Provide subject matter expertise on issues tracked by issue management.
What you bring:
Basic:
- 5+ years of relevant experience in information security risk management, or a related domain.
- 4+ years of relevant experience working in cybersecurity risk management.
- Experience with risk management frameworks (e.g., RMF, ISO27005, NIST 800-37, NIST 800-30, etc).
- Experience with and understanding of cyber threats and vulnerabilities.
- Experience with relevant control frameworks (e.g., SSAE16, ISO27001, NIST, PCI, SIG, CSA, HIPAA, HITRUST, FedRamp).
- Strong experience with a GRC Risk management tool, preferably ServiceNow.
- One or more of these certifications: CISSP, CRISC, CISM, CTPRP, CISA, CIPT, CompTIA Security+, AWS/Azure Security.
- Experience with technical security controls and how these apply to different functions throughout the business.
Preferred:
- Self-starter with excellent communication, collaborative, and presentation skills.
- Independently driven, resourceful, and able to deliver results with minimal oversight.
- Strong sense of ownership and drive.
- Strong business sense with the ability to engage with technical teams to present assessment results, and risks and to participate in discussions about acceptable and compensating controls.
- Experience working hands-on with cross-functional teams in assessing processes, risks, and controls.
If you are interested in this role, then please click APPLY NOW. For other opportunities available at Akkodis, or any questions, please contact Amit Kumar Singh at amit.singh@akkodisgroup.com .
Equal Opportunity Employer/Veterans/Disabled
Benefits offerings include but are not limited to: (INCLUDE YOUR CLIENT’S BENEFITS HERE. THE FOLLOWING ARE ONLY FOR REFERENCE)
- Paid Time Off
- Paid Parental Leave
- Full Health Benefits Plans
- Retirement Plans
- Learning and Development
- Compassionate Care Leave
To read our Candidate Privacy Information Statement, which explains how we will use your information, please visit https://www.akkodis.com/en/privacy-policy.
