Manager, Cybersecurity Risk Management

W. R. Grace & Co.•Columbia, MD

4d•$125,248 - $172,216•Hybrid

About The Position

Grace is seeking a Manager, Cybersecurity Risk Management to join our Global Cybersecurity Team! This role reports to Deputy CISO located at Columbia, MD. We are looking for a strategic, highly skilled Cybersecurity Risk Manager to guide and enhance our cybersecurity risk management capabilities. In this senior role, you will serve as a trusted advisor to technology and business leaders, spearheading initiatives to identify, evaluate, and mitigate cybersecurity risks across Standard Industries.

Requirements

Bachelor’s degree in Information Technology, Cybersecurity, or a related discipline; advanced degree or certifications such as CISSP, CISM, or CRISC are highly desirable.
5–8 years of professional experience in cybersecurity, IT audit, or risk management, demonstrating expertise with enterprise risk frameworks like NIST CSF or ISO 27005.
Track record of performing in-depth control assessments, vendor risk evaluations, and security governance functions.
Outstanding verbal, written, and interpersonal communication skills, with the ability to effectively influence stakeholders across all organizational levels.
Strong analytical abilities and hands-on experience with enterprise IT and cloud-based environments.
Proven capability to lead cross-functional projects and manage several priorities concurrently.
Ability to travel up to 25% as needed

Nice To Haves

Strong understanding of IT infrastructure, cloud environments, and associated technical controls
Experience with Governance, Risk, and Compliance and IT Service Management platforms
Demonstrated executive presence with the ability to effectively communicate with senior leadership, influence decision-making, and build trusted partnerships across business and technology functions.

Responsibilities

Lead the development, execution, and ongoing enhancement of the enterprise cybersecurity risk management program across operating companies under Standard Industries.
Oversee the creation and maintenance of risk registers, ensuring risks are thoroughly documented, prioritized, and tracked until resolution.
Conduct advanced security control assessments to measure effectiveness, ensure compliance, and align with internal and external standards.
Collaborate with business units, IT leaders, and cybersecurity teams to provide expert guidance on risk mitigation strategies and improvements to controls.
Drive the refinement of organization-wide control frameworks, audit mechanisms, and compliance monitoring processes.
Manage and advance third-party risk management activities, including risk assessments, scoring, and continuous monitoring programs.
Advise leadership on risk trends, new and emerging threats, and recommended controls by leveraging data-driven insights and professional expertise.
Oversee the preparation and delivery of risk reports, dashboards, and metrics for executive stakeholders.
Manage and mentor junior risk team members and support the development of cybersecurity governance and awareness initiatives.