Cyber Governance & Risk Manager (P-117)

Smash CR•San Jose, CA

9d•Remote

About The Position

This position is Remote to work with a US Company; you will require to have Citizenship or a work permit from Costa Rica to apply for this role. You will lead cybersecurity governance and risk management initiatives by establishing control ownership, strengthening governance frameworks, and aligning cyber operations with regulatory expectations. This role focuses on improving risk visibility, control accountability, and compliance maturity across enterprise cybersecurity functions.

Requirements

Proven experience in cybersecurity governance, risk management, or information security programs.
Strong understanding of cybersecurity controls, risk assessment methodologies, and control mapping.
Experience aligning cyber programs with NCUA, FFIEC, or similar regulatory frameworks.
Experience developing governance models, policy frameworks, and accountability structures.
Knowledge of cybersecurity metrics, KRIs, and reporting practices.
Ability to translate high-level policies into operational standards and procedures.
Strong analytical, documentation, and problem-solving skills.
Experience collaborating with cross-functional stakeholders across security, IT, compliance, and operations.
Excellent written and verbal communication skills.

Nice To Haves

Experience in banking, credit union, or regulated financial services environments.
Familiarity with frameworks such as NIST CSF, ISO 27001, or COBIT.
Relevant certifications such as CISSP, CISM, CRISC, or CISA.
Experience supporting audits, regulatory reviews, or compliance assessments.

Responsibilities

Define and maintain ownership of cybersecurity controls across operational teams.
Conduct cyber risk assessments and map risks to appropriate controls and mitigation strategies.
Develop and maintain governance frameworks including RACI models, control libraries, and policy structures.
Design and monitor cybersecurity metrics, dashboards, and Key Risk Indicators (KRIs).
Translate enterprise security policies into actionable standards, procedures, and operational controls.
Ensure consistent implementation, enforcement, and documentation of cybersecurity standards.
Support alignment with NCUA, FFIEC, and other regulatory frameworks and risk-based approaches.
Collaborate with technology, compliance, audit, and operational teams to strengthen governance processes.
Identify gaps in cybersecurity controls and recommend remediation strategies.
Prepare reports and risk summaries for leadership, audit, and regulatory stakeholders.
Promote continuous improvement of cybersecurity governance and risk management practices.