Director, Security Risk Management

CardWorks Servicing LLC

Woodbury, NY, USA
$151,165 to $167,961 py
On-site
Information security risk management
Vendor security assessment programs
Cyber risk identification and mitigation
CardWorks Servicing LLC is seeking a Director of Security Risk Management to lead and enhance their information security risk management programs. The ideal candidate will have extensive experience in information security, risk management, and compliance, focusing on integrating risk management into business processes

Job Summary

  • The Director oversees and performs information security risk assessments across internal systems, business processes, third-party vendors, and enterprise projects to ensure risks are effectively identified, rated, and managed.
  • Lead vendor security reviews, evaluating SOC 2 reports, ISO 27001 certifications, PCI AOCs, and penetration test results to assess vendor control maturity.
  • Define, track, and report cybersecurity risk metrics, dashboards, and assessment outcomes for senior leadership.

Matching Summary

Match Score: 85

CardWorks Servicing LLC is seeking a Director of Security Risk Management to lead and enhance their information security risk management programs. The ideal candidate will have extensive experience in information security, risk management, and compliance, focusing on integrating risk management into business processes.

Salary

$151,165 to $167,961

Skills & Requirements

Must-have

  • Information security risk management
  • Vendor security assessment programs
  • Cyber risk identification and mitigation
  • NIST Cybersecurity Framework (CSF)
  • PCI DSS

Nice-to-have

  • Proactive security risk management culture
  • Streamline assessment workflows
  • Automation and analytics

Key Requirements

  • 8+ years of experience in information security
  • 3+ years in a leadership or program management capacity
  • Experience with NIST CSF, CRI Profile, PCI DSS
  • Familiarity with GRC platforms
  • Bachelor’s or master’s degree preferred
  • CRISC, CISM, CISSP, or CISA certifications preferred

Work Rights

Not specified

Tailored Resume

Cover Letter