A Risk Manager evaluates risk and recommends and manages strategies to mitigate or offset risks that could result in financial losses for a company or organization. Analyzes current risks and assesses potential new risks. Reviews contracts and insurance policies; prepares risk budgets. Communicates risk policies and procedures to staff at all levels of a company.
Plano, Texas (Hybrid) Description The T echnology & Cybersecurity Risk Management (T&CRM) Engineer supports the T&CRM program by analyzing technology and cybersecurity risks, conducting risk assessments, leading risk-related initiatives, and enhancing risk management processes. This role helps identify, visualize, and reduce technology and cybersecurity risks while guiding stakeholders through risk-based decision-making. Core Responsibilities Conduct risk intake, assessments, triage sessions, and stakeholder risk discussions. Assess technology and cybersecurity risks using NIST, COBIT, and ISO frameworks. Identify, document, and evaluate inherent, residual, and emerging technology risks. Review controls and evaluate their effectiveness in mitigating identified risks. Map risks to controls and applicable framework and policy requirements. Facilitate control walkthroughs and risk discussions with control owners and stakeholders. Document risk statements, controls, evidence, and assessment results in governance tools and Word/Excel/PPT. Develop risk treatment recommendations and track remediation activities through closure. Escalate overdue actions, unresolved risks, and significant control or compliance concerns. Prepare executive-ready risk reports, dashboards, and governance presentation materials.
Required Knowledge and Skills Technology and Cybersecurity Fundamentals:
Demonstrates a solid understanding of security controls, threats, and risk concepts. NIST, COBIT, and
ISO 27001
framework knowledge.
Risk Assessment & Analysis:
Ability to identify, assess, and document technology and cybersecurity risks and control gaps. Understanding of control design, control effectiveness, and risk mitigation concepts.
Project Management:
Effectively plans, tracks, and executes work across multiple concurrent initiatives.
Process Improvement:
Identifies opportunities to streamline workflows and improve operational efficiency.
Stakeholder Collaboration:
Works effectively with crossfunctional teams and external partners.
Communication:
Clearly communicates technical risk information to both technical and nontechnical audiences. Attention to
Detail:
Produces accurate, welldocumented assessments and maintains reliable risk records. Tool proficiency : Microsoft Word, Excel, PowerPoint, and CoPilot. ServiceNow. Requirements Bachelor s degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field (or equivalent experience). 1 3 years of experience in cybersecurity or technology risk management, IT risk, cybersecurity, compliance, or related discipline. Foundational understanding of cybersecurity principles, risk assessment methodologies, and common security control frameworks. Experience supporting projects or initiatives that require coordination across multiple stakeholders. Strong written and verbal communication skills, with the ability to clearly document risks and recommendations. Key Success Factors Comfortable navigating conversations with Control Owners and stakeholders. Clear and structured articulation of technology risks and controls. Strong attention to detail and documentation quality. Willingness to learn and grow within a Technology & Cybersecurity Risk Management function. Collaborative mindset across technical and non-technical teams.
