Director of Risk Assessment

The Director of Risk Assessment will be responsible for developing and implementing a comprehensive risk assessment framework to identify potential threats and vulnerabilities within our information systems. This role will require collaboration with various stakeholders to ensure that risk management strategies align with business objectives and regulatory requirements.

Key Responsibilities:

• Risk Identification and Analysis: Lead efforts to identify, assess, and prioritize risks related to information security, data privacy, and compliance.
• Collaboration: Work closely with IT, compliance, legal, and other relevant departments to ensure a holistic approach to risk management.
• Reporting: Prepare and present comprehensive risk assessment reports to senior management and the board, highlighting key risks, vulnerabilities, and recommended mitigation strategies.
• Policy Development: Collaborate in the development and revision of security policies and procedures based on identified risks and industry standards.
• Training and Awareness: Develop and deliver training programs to enhance organizational awareness of risk management practices and security policies.
• Continuous Improvement: Monitor and review risk assessment processes regularly to identify areas for improvement and ensure alignment with evolving threats and regulatory changes.
• Incident Response Support: Participate in incident response activities by providing insights into risk implications and recommending mitigation strategies.

Qualifications:

• Bachelor’s degree in Information Security, Risk Management, Business Administration, or a related field (Master’s degree preferred).
• 7+ years of experience in risk assessment, information security, or a related field, with at least 3 years in a leadership role.
• Strong understanding of risk management principles, frameworks, and methodologies.
• Experience with regulatory compliance standards (e.g., GDPR, HIPAA, PCI-DSS).
• Excellent analytical and problem-solving skills, with a detail-oriented approach.
• Exceptional communication and interpersonal skills, capable of influencing and collaborating with diverse stakeholders.
• Proficiency in risk assessment tools and software.

Preferred Qualifications:

• Relevant certifications (e.g., CISSP, CISM, CRISC).
• Experience with security audits and compliance assessments.

Salary Range:

The anticipated base salary range for this position is between $150,000 and $189,000. Base salary ranges may vary by geographic location and relevant experience, education, certifications, and seniority as compared to others doing substantially similar work. There is no guarantee an offer will be at the top of the posted range based on the salary analysis.

Here are some of our local benefits:

• Three week's paid time off on top of 12 paid holidays, floating holidays, and holiday allowance increase based on tenure
• Gym membership subsidy
• Medical and dental insurance
• Pet insurance
• Employee Assistance Program
• College Savings Plan
• Travel assistance
• 401(k) with up to 4% employer match