Senior Manager, Risk Partner - Cybersecurity

- Act as the primary risk partner and advisor to senior business and technology leaders in Enterprise Shared Services Technology and related functions (HR, Legal, Finance, Law & Regulation), providing an integrated view of operational risk across multiple domains. - Create and sustain a consolidated risk profile that connects various risk signals into a comprehensive narrative for leadership and governance discussions. - Steer strategy, investment decisions, and delivery plans by ensuring that risk considerations are identified early and aligned with the enterprises risk appetite. - Provide leadership on cybersecurity risks for enterprise platforms associated with shared services, including risks linked to sensitive employee data, financial systems, and regulatory data. - Maintain hands-on cybersecurity expertise and serve as the principal cybersecurity risk authority for the supported business and technology domains. - Facilitate high-impact discussions on cyber risks with technology teams and ensure informed decisions are made regarding stakeholder risk acceptance. - Translate major cybersecurity findings into comprehensible business impacts, trade-offs, and risk profiles for senior leadership. - Serve as a second line risk advisor during significant cyber incidents or supplier events, overseeing business and customer impact assessments and remediation efforts. - Operate as a second line of defense, offering independent oversight, challenge, and guidance to first line teams without owning controls or execution. - Implement enterprise risk taxonomies, assessment methodologies, and reporting standards to maintain consistency in risk information. - Monitor remediation commitments and escalate risks that surpass established tolerances. - Plan and oversee risk assessments and thematic reviews, synthesizing results into executive insights and trend analyses. - Identify systemic risk trends and emerging threats, proactively advising leadership on potential impacts and mitigation strategies. - Prepare and deliver concise risk briefings for senior leaders, councils, and committees. - Leverage extended domain expertise while retaining accountability for the integrated risk view and messaging.