Product Security Risk Manager responsible for evolving risk management capabilities at Red Hat. Collaborating across product management and engineering to drive risk governance and reporting.
Responsibilities
Own and Evolve the Risk Management Methodology : Develop, own, and manage the central Product Security risk register, establishing it as the single source of truth for tracking and decision-making.
Assess and Quantify Risk : Partner with technical teams to establish a consistent methodology for assessing and quantifying risk that goes beyond traditional severity scores to incorporate business context such as product impact, revenue, and reputational damage.
Translate and Articulate Risks : Translate complex technical issues and compliance gaps into clear, quantifiable business impact for non-technical audiences.
Drive Governance and Coordination : Lead a cross-functional risk governance committee to review and act on top risks.
Create Tailored Reporting : Design and deliver tailored risk reports, metrics, and dashboards for diverse audiences, including executive leadership, product engineering leaders, legal, and sales organizations.
Improve and Standardize Processes : Build a structured, repeatable program for risk identification, assessment, and communication across the organization.
Build Thought Leadership : Develop learning and development materials to foster a culture of risk awareness.
Requirements
7+ years of experience in product security, application security, or a technical GRC (Governance, Risk, and Compliance) role.
Deep understanding of core security concepts, including the Secure Development Lifecycle (SDL), threat modeling, vulnerability management, and risk assessment methodologies.
Experience building and managing a risk register using dedicated GRC platforms or other tools like Jira.
A bachelor's degree in a related field or an industry certification like CISSP, CGRC, CRISC or CISM are beneficial but not required.
Exceptional ability to translate deep technical issues into clear business risks, explaining the "so what" to senior leaders.
Excellent verbal and written communication skills, with experience presenting to both executive and technical audiences in highly collaborative environments.
Proven skill in influencing cross-functional teams and senior leadership without direct authority.
A process-oriented mindset with demonstrated experience building structured programs from ambiguous or ad-hoc processes.
High attention to detail and the ability to break down large, complex strategies into achievable actions and tasks.
Strong organizational skills to manage multiple stakeholders and drive complex projects to completion.
Proactively leverage AI technologies to streamline workflows, simplify complexity, and enhance overall efficiency.
Benefits
Comprehensive medical, dental, and vision coverage
Flexible Spending Account - healthcare and dependent care
Health Savings Account - high deductible medical plan
Retirement 401(k) with employer match
Paid time off and holidays
Paid parental leave plans for all new parents
Leave benefits including disability, paid family medical leave, and paid military leave
Additional benefits including employee stock purchase plan, family planning reimbursement, tuition reimbursement, transportation expense account, employee assistance program, and more!
Part - Time Security Officer safeguarding personnel and property at Kaman Air Vehicles. Providing access control, monitoring systems, and responding to incidents in Bloomfield, CT.
Security Officer responsible for maintaining a safe environment for clients and employees. Enforcing policies and responding to emergencies at the client's site.
Senior Security Advisor enhancing security measures to align with corporate objectives at Desjardins. Leading development of strategic initiatives and overseeing best practices in security.
Controls Professional assessing internal control frameworks at Barclays, improving control effectiveness and managing risks to ensure compliance with regulations.
Senior Information Security Engineer at Wells Fargo investigating insider threats and strengthening cybersecurity measures. Conducting advanced investigations and collaborating with cyber teams to mitigate risks.
Staff Product Manager overseeing enterprise security product strategy for Tenable. Collaborating with various teams to deliver customer - focused solutions and product features.
Information Systems Security Officer managing operational security posture for information systems at GDIT. Collaborating closely with ISSM and ISO, handling security aspects, and ensuring compliance with security standards.
Program Security Representative providing multi - discipline security support for Special Access Programs. Ensuring compliance, developing policies, and conducting security assessments in a military context.
Senior Cyber Security Project Manager at Airbus Protect managing medium complexity projects in Cyber Security Consulting. Focusing on project leadership and team management in diverse client settings.
Security Architect responsible for designing cloud security architectures for leading brands. Ensuring compliance and guiding incident response strategies in AWS environments.