Cyber Security Risk Management Engineer

ViaSat Inc. • Marlborough, MA

65d • Onsite

About The Position

One team. Global challenges. Infinite opportunities. At Viasat, we're on a mission to deliver connections with the capacity to change the world. For more than 35 years, Viasat has helped shape how consumers, businesses, governments and militaries around the globe communicate. We're looking for people who think big, act fearlessly, and create an inclusive environment that drives positive impact to join our team. We're excited to announce a fantastic opportunity for a Cyber Security professional to join our growing team! Join our Cyber Security Risk Management team and be ready to change the way risks are identified, analyzed and reported. In this role, you'll be instrumental in implementing a risk management process which is fully aligned to the organization's key business priorities, introducing state-of-the-art Cyber Risk Quantification (CRQ) tools and methodologies. You will work closely with our security engineers to enable effective and efficient use of our resources, maximizing the return on our security investment. You will coordinate with, and provide support to, our security governance and compliance team, streamlining and automating our risk identification and reporting process. Embrace the opportunity to apply your analytical and technical skills for CRQ in shaping Cyber Security Risk Management at Viasat. As a Cybersecurity Risk Management Engineer, you will be a key component of a team which will implement, manage and own a robust, agile and scalable Risk Management process. You will maintain and update the organization's cyber risk register, embedding CRQ frameworks and tools in the risk management process, and leveraging CRQ to track and prioritize remediation efforts. You will prepare clear, actionable reports and presentations for the CISO and senior leaders, demonstrating the value that CRQ delivers to the company. You will also build strong connections and close relationships with key stakeholders across the organization, ensuring risk management practices are embedded into projects, systems and third-party engagements.

Requirements

• Bachelor's degree or higher in Cyber Security, Information Technology, Risk Management, a related field or equivalent years of experience.
• 5+ years of experience in Cyber Security, Risk Analysis, IT Risk Management, or Governance, Risk and Compliance roles.
• A strong understanding of Cyber Risk Management principles, Security Frameworks, and Regulatory Standards.
• Experience in implementation of CRQ tools and methodologies within the organization.
• Data analytics skills and experience.
• Good knowledge of Information Security fundamentals, technologies, and principles.
• Strong communication, collaboration, and problem-solving skills, along with an analytical mindset, and an ability to translate technical risks into business terms
• Must be able to obtain a United States Confidential Clearance
• Must be able to come onsite to a Viasat office location

Nice To Haves

• Relevant Certifications (e.g., CRISC, CISM, CISSP).
• Good understanding of the FAIR (Factorial Analysis of Information Risk) approach to measuring and managing information risk.
• Hands-on experience with off-the-shelf Cyber Risk Management tools.
• Practical knowledge of Bayesian statistical methods.
• Familiarity with Monte Carlo simulations.
• Proficiency in Jira.
• Eagerness to learn new skills and be self-motivated.
• Work well under pressure and under your own initiative.
• Ability to work in a constantly changing and fast paced environment.
• Comfortable working in a multi-stakeholder environment.

Responsibilities

• maintain and update the organization's cyber risk register, embedding CRQ frameworks and tools in the risk management process, and leveraging CRQ to track and prioritize remediation efforts
• prepare clear, actionable reports and presentations for the CISO and senior leaders, demonstrating the value that CRQ delivers to the company
• build strong connections and close relationships with key stakeholders across the organization, ensuring risk management practices are embedded into projects, systems and third-party engagements.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Telecommunications
• Number of Employees: 5,001-10,000 employees