Associate Director – Digital Risk Management
RTX
CloudCyber Security
Senior Manager, Risk Assessments
RTX
full-time
Posted on:
Origin: • 🇺🇸 United States
Visit company websiteSalary
💰 $124,000 - $250,000 per year
Job Level
Senior
Tech Stack
CloudCyber Security
About the role
- Lead a team of digital risk assessors located in different regions
- Lead and manage execution of long-term strategies and day-to-day operations for a team of skilled professionals
- Develop key plans and processes to achieve results, focusing on short- to medium-term objectives
- Create procedures and standards to support the organization’s strategies
- Periodically review RTX Corporate's sites to identify critical business functions and risks based on changes in the business environment or external threats
- Maintain inventory of RTX Corporate’s sites complete and up-to-date
- Partner with Internal Audit and RTX Corporate’s Chief Information Security Officer to align on annual risk assessment priorities
- Plan and conduct risk assessments within RTX Corporate’s digital environment, document results in the system of record, regularly review remediation status of identified risks, and assist other risk assessment teams as needed
- Guide RTX Corporate's sites on how to address identified risks effectively and help document findings, exceptions, and remediation plans in RTX’s system of record
- Provide regular updates on digital risk assessment activities and identified risks to the Associate Director - Risk Assessments & Audit Engagement
- Conduct quality assurance of risk assessment deliverables provided by the team
- Promote consistency in digital risk assessments and provide expert advice to ensure RTX Corporate’s requirements are met
Requirements
- A University Degree in Business, Science, Technology, Engineering or Mathematics and a minimum of 10 years of prior relevant experience, or an Advanced Degree in a related field and a minimum of 7 years of relevant experience
- Prior relevant work experience must include IT & Cyber control assessments, cybersecurity, or a related discipline, with at least 3 years in a leadership role
- Must be authorized to work in the U.S. without sponsorship now or in the future
- Preferably 2+ years of experience in a top-tier risk advisory or management consulting firm or Financial Services
- Strong understanding of digital control frameworks, standards, and best practices (e.g., NIST SP 800-171, NIST SP 800-53, ISO 27001)
- Ability to communicate with all levels of management verbally and written, facilitate effective meetings, build effective working relationships and partnerships, and strong interpersonal skills
- Excellent analytical, problem-solving, and decision-making skills
- Relevant certifications such as CISSP, CISM, CRISC, or similar are desirable
- Highly proficient in Microsoft Office products with experience in preparing presentations and presenting to executive leadership
- General knowledge of IT, Artificial Intelligence and cybersecurity with experience in the following areas: incident response, business continuity/ disaster recovery, vulnerability management, application security, network security, database security, identity & access management, OT security, cloud security, third-party & supply chain risk management
- General knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity (e.g., DFARS, FAR, ITAR, EAR)
