Talent page

Vacancy Opportunities throughout our Network
Holland FinTech
Holland FinTech
184
companies
3,602
Jobs
Search
jobs
Explore
companiesTalent
network
My job alerts
\n

\n","datePosted":"2023-09-04T14:02:41.399Z","employmentType":[],"hiringOrganization":{"@type":"Organization","name":"McKinsey & Company","sameAs":"https://mckinsey.com","logo":"https://cdn.filestackcontent.com/output=f:webp,t:true,q:80,c:true/cache=expiry:max/resize=w:340/P77DPRtGTye15MmkcIyC"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Washington, DC, USA"}}}

Cybersecurity Risk and Compliance Manager

McKinsey & Company

Legal
Washington, DC, USA
Posted on Monday, September 4, 2023
Apply
Technology & Digital

Cybersecurity Risk and Compliance Manager

  • Atlanta
  • Waltham
  • Washington DC
Apply Now

Who You'll Work With

You’ll join an IT team based out of our Waltham, Washington, DC or Atlanta office, part of our Secure Foundations function within the Tech Ecosystem. This team manages and supports a cloud environment for certain high-risk data and client engagements. You will work closely with various teams across the Tech Ecosystem, as well as non-tech teams, business stakeholders and 3rd party IT vendors. 

What You'll Do

Your role will involve identifying opportunities to enhance security by design, developing a profound understanding of our business contexts to influence IT and security operations, and creating, updating, and integrating security policies and procedures. You will also lead the charge in ensuring the restricted environment team’s readiness for external audits, refining the cybersecurity program, and conducting systemic risk assessments. 
As a Cybersecurity Risk and Compliance Manager, you will play a crucial role in facilitating cross-team tabletop incident response exercises, advising the Security Operations Center during incidents, and evaluating new security and IT tools from a compliance and risk perspective. Furthermore you will take a lead role in nurturing a culture where colleagues understand the integral connection between our firm's values and information security, making your role instrumental in safeguarding our organization's assets and reputation.

Qualifications

  • 5+ years in Governance, Risk, and Compliance (GRC) roles
  • US citizenship is mandatory
  • Familiarity with common cybersecurity controls frameworks (NIST, CMMC, ISO)
  • Excellent written and verbal communication skills
  • CISSP, CISM, CISA or similar cyber management certification a plus
  • CIPP or similar privacy certification a plus
  • Experience managing the information security program for cloud environments
  • Familiarity helping technical and non-technical teams negotiate and make informed, risk-based decisions. as well as advising contracts, legal, compliance, and facility security teams from a cybersecurity perspective
  • Experience writing, refreshing, and integrating policies and procedures 
  • Experience performing and documenting systemic risk assessments
  • Hands on experience monitoring supply chain risk
Industries
  • High Tech
Capabilities
  • Technology
Apply Now

FOR U.S. APPLICANTS: McKinsey & Company is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by applicable law.

Certain US states require McKinsey & Company to include a reasonable estimate of the salary range for this role. A reasonable estimate of the range for new joiners for this role in the United States is $159,100 - $210,000. Actual salaries may vary and may be above or below the range based on various factors, including, but not limited to an individual's assigned office location, experience and expertise. Certain roles are also eligible for bonuses, subject to McKinsey’s discretion and based on factors such as individual and/or organizational performance.

Additionally, McKinsey offers a comprehensive benefits package, including medical, dental and vision coverage, telemedicine services, life, accident and disability insurance, parental leave and family planning benefits, caregiving resources, a generous retirement program, financial guidance, and paid time off.

FOR NON-U.S. APPLICANTS: McKinsey & Company is an Equal Opportunity employer. For additional details regarding our global EEO policy and diversity initiatives, please visit our McKinsey Careers and Diversity & Inclusion sites.

Job Skill Group - CSSA
Job Skill Code - SCM - Security Manager I
Function - Technology
Industry - High Tech
Post to LinkedIn - Yes
Posted to LinkedIn Date - Tue Aug 15 00:00:00 GMT 2023
LinkedIn Posting City - Atlanta
LinkedIn Posting State/Province - Georgia 
LinkedIn Posting Country - United States
LinkedIn Job Title - Cybersecurity Risk and Compliance Manager
LinkedIn Function - Information Technology
LinkedIn Industry - Information Technology and Services
LinkedIn Seniority Level - Mid-Senior level
Apply now
See more open positions at McKinsey & Company
Privacy policyCookie policy