Manager of Cyber Risk Assurance
About The Position
This role does not offer visa sponsorship. Candidates must be authorized to work in the U.S. without current or future sponsorship (including CPT, OPT, TN, or H-1B). The Manager of Cyber Risk Assurance owns the definition, execution, and continuous evolution of Delta Dental of California's cyber risk assurance capabilities. This role is critical to advancing cyber assurance into a future state defined by measurable capability outcomes, automation, AI augmentation, and timely, evidence-based insight. The manager will lead the team responsible for determining whether cyber risk management capabilities are appropriately designed, implemented, and operating effectively. This leader pursues measurable assurance outcomes across people, processes, and technology. The role collaborates closely with cyber risk capability owners, Technology, Internal Audit, external auditors, Third-Party Risk Management, Risk and Compliance, Legal, and Privacy to support regulatory readiness, audits, examinations, and informed risk decisions. This individual will lead a multidisciplinary team responsible for Risk Control Monitoring and Validation (RCMV), the Unified Requirements Framework (URF), effectiveness testing, evidence management, issue oversight, audit support, and agentic and deterministic assurance automation.
Requirements
- Bachelor’s degree and 8+ years of professional experience in cybersecurity, cyber risk management, technology risk, IT audit, regulatory compliance, or controls assurance, including at least 2+ years in leadership roles; or equivalent experience in lieu of education.
- Strong expertise in cyber risk assurance disciplines, including control design and effectiveness, evidence evaluation, testing methodology, regulatory analysis, and issue management.
- Deep understanding of cybersecurity frameworks and requirements such as NIST, HIPAA Security Rule, NYDFS Cybersecurity Regulation, PCI DSS, and ISO/IEC 27001.
- Experience applying automation, analytics, continuous control monitoring, or AI/ML to risk, compliance, audit, or assurance processes.
- Demonstrated ability to: Lead large-scale assurance, risk, compliance, or audit capabilities.
- Demonstrated ability to: Build and manage high-performing multidisciplinary teams.
- Demonstrated ability to: Align assurance activities with business risk and executive decision needs.
- Demonstrated ability to: Drive continuous improvement using metrics, evidence, and performance insights.
- Demonstrated ability to: Manage multiple concurrent assurance activities with a highly organized, detail-oriented, and execution-focused approach, particularly where accuracy, completeness, and regulatory deadlines are critical.
- Strong communication and stakeholder management skills across all levels of the organization.
Responsibilities
- Own and execute the cyber risk assurance strategy, driving transformation toward highly automated, AI-augmented, and increasingly continuous assurance.
- Translate strategic objectives, emerging risks, and regulatory obligations into actionable RCMV and URF roadmaps aligned with enterprise cyber risk management goals.
- Maintain the Unified Requirements Framework by harmonizing applicable regulatory, contractual, standards-based, and internal requirements into measurable capability outcomes.
- Develop and maintain a risk-based effectiveness testing framework, including evidence expectations, test procedures, metrics, thresholds, and approved pass/fail logic.
- Assess cyber risk management capabilities for effectiveness; document material gaps as formal issues and ensure appropriate ownership, escalation, remediation, and validation.
- Centralize and maintain authoritative evidence supporting assurance conclusions, internal and external audits, regulatory examinations, and attestations.
- Champion the adoption of automation, analytics, machine learning, and AI to improve evidence collection, control testing, coverage, frequency, consistency, and reporting.
- Lead the evolution of assurance toward scalable, objective, and AI-enabled assessment methods, defining how assurance objectives and evaluation criteria can be translated into repeatable automated processes.
- Partner with capability owners and assurance stakeholders to evaluate regulatory change, extend assurance to new technologies and risk domains, and resolve identified gaps.
- Manage multiple concurrent cyber assurance, audit, and regulatory activities, ensuring deliverables remain on track and critical compliance deadlines are met.
- Define and track key performance metrics that demonstrate assurance coverage, currency, effectiveness, issue remediation, automation adoption, and business value.
Benefits
- Competitive base and incentive pay
- 401(k) with robust matching and non-matching contributions
- Rich medical & pharmacy benefits
- 100% employer-paid dental and vision benefits
- Holistic wellbeing program with deep financial incentives
- Generous paid time off plus 12 paid holidays and your birthday off
- Culture of growth and learning: career development; tuition reimbursement; recognition program
- Family support: adoption assistance, fertility treatment, child, elder & pet care assistance
- Social responsibility and volunteer opportunities
- Employee discount program
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
