Senior Risk Manager - Information Security

Omnissa

$175K — $220K *
US-Anywhere
+ 2 other locationsRemote
Information Technology
8 - 10 years of experience
Job Overview by Ladders

Qualifications

  • 8+ years in risk management or a related field, including 3+ years in people management.
  • In-depth knowledge of risk management frameworks (e.g., COSO ERM, ISO 31000).
  • Experience running an enterprise risk program in a mid-to-large organization.
  • Strong analytical and communication skills for diverse audiences.
  • Proven ability to influence across organizational levels without direct authority.
  • Bachelor's degree in business, finance, or related field (master’s preferred).
  • Professional certification like CRISC, CISM, or equivalent.

Responsibilities

  • Own and manage the enterprise risk management framework and reporting.
  • Lead risk assessments to identify threats and evaluate controls.
  • Maintain risk taxonomy and methodologies aligned to industry standards.
  • Integrate risk management into strategic planning and change processes.
  • Prepare and present risk reports to senior leadership and committees.
  • Establish key risk indicators and ensure escalation of critical events.
  • Support third-party and vendor risk management activities.

Benefits

  • Employee ownership opportunities.
  • Health insurance coverage.
  • 401k plan with matching contributions.
  • Disability insurance options.
  • Paid time off for work-life balance.
  • Growth opportunities for professional development.
Full Job Description

Job Description:

What is the opportunity?

Omnissa is in search for a Senior Manager, Risk Management to lead the enterprise risk management function within the GRC team. This individual is accountable for designing, operating, and continuously maturing the organization's risk identification, assessment, and treatment framework. The role partners closely with business units, IT, Legal, Compliance, and executive leadership to ensure that risk posture is well-understood, documented, and appropriately managed. Here is a breakdown:

What You’ll Do

  • Own and operate the enterprise risk management framework, including risk appetite statements, risk registers, and risk reporting cadences.
  • Lead periodic risk assessments across business functions, identifying emerging threats and evaluating the effectiveness of existing controls.
  • Maintain and evolve risk taxonomy, scoring methodologies, and heat maps aligned to industry best practices (e.g., COSO ERM, ISO 31000).
  • Drive integration of risk management into strategic planning, product development, and change management processes.
  • Prepare and present risk reports for senior leadership, the Board, and audit/risk committees, translating complex risk data into actionable insights.
  • Establish and track key risk indicators (KRIs) and ensure timely escalation of critical risk events.
  • Maintain risk management policies, standards, and procedures; drive policy review cycles and updates.
  • Serve as a trusted advisor to business unit leaders on risk-related matters, helping embed a risk-aware culture.
  • Collaborate with IT Security, Legal, Privacy, and Internal Audit teams on integrated risk and control activities.
  • Support third-party and vendor risk management activities in coordination with Procurement and IT.
  • Lead, mentor, and develop a team of risk analysts and specialists within the GRC function.
  • Set team goals, manage performance, and foster a culture of continuous improvement and professional development.
  • Drive process automation and tooling improvements to enhance risk program efficiency and scalability.
  • Coordinate risk management contributions to internal and external audits, regulatory examinations, and compliance assessments.
  • Monitor the evolving regulatory landscape and assess implications for the organization's risk profile.

What You”ll bring

  • 8+ years of experience in risk management, GRC, or a closely related field; 3+ years in a people management role.
  • Deep knowledge of risk management frameworks (COSO ERM, ISO 31000, NIST RMF, or equivalent).
  • Demonstrated experience operating an enterprise risk program in a mid-to-large organization.
  • Strong analytical and communication skills; able to present risk information clearly to technical and non-technical audiences, including executives.
  • Proven ability to influence and build relationships across organizational levels without direct authority.
  • Bachelor’s degree in business, Finance, Information Systems, or a related field.
  • Professional certification such as CRISC, CISM, CGEIT, or equivalent.
  • Experience in regulated industries (financial services, healthcare, technology).
  • Familiarity with GRC platforms (e.g., ServiceNow GRC, Archer, OneTrust, LogicGate).
  • Master's degree (MBA, MS Risk Management, or related discipline).
  • Strategic thinking and risk-based decision-making
  • Leadership and team development
  • Stakeholder management and executive communication
  • Analytical rigor and attention to detail
  • Adaptability in a fast-paced, evolving environment
  • Strong working knowledge of enterprise tools such as JIRA, Atlassian Cloud, Claude, Anecdotes and Process Unity.

Location: Remote
Travel Expectations: None
Education: Bachelor's Degree or equivalent combination of education and relevant professional experience.

Compensation:The typical base salary for this role is between USD $175,000 – $220,000  per year and it may be eligible for participation in a corporate bonus program. Actual compensation offer may vary from posted hiring range based upon geographic location, work experience, education, skill level, or other relevant factors. In addition to competitive compensation, Omnissa offers a variety of benefits such as employee ownership, health insurance, 401k with matching contributions, disability insurance, paid-time off, growth opportunities, and more.
 

Similar Jobs

More Jobs at Omnissa

More Information Technology Jobs

Find similar Senior Risk Manager - Information Security jobs: