Enterprise Risk Manager

Required Skills & Experience

5–6+ years of consulting experience Strong enterprise cybersecurity and/or technology risk assessment experience Experience working across multiple security domains, including identity, infrastructure, applications, data, compliance, and resilience Experience with technology/security due diligence, post-merger integration, inherited-risk assessment, or large-scale transformation work Ability to define, assess, and prioritize enterprise risks, including severity, ownership, evidence, and business impact Strong executive communication skills, with experience translating technical risk into clear business impact and recommended actions Experience working in complex, distributed, or multi-entity enterprise environments Strong experience managing ambiguity, incomplete evidence, and multiple stakeholder groups

Nice to Have Skills & Experience

Big Four consulting background Healthcare industry experience Experience in other highly regulated industries Major SI or specialist advisory background Experience developing risk documentation, onboarding playbooks, and policy decisions

Job Description

We are looking for an experienced Enterprise Risk Manager to assess and consolidate cybersecurity and technology risks across a complex enterprise environment. This person will bring together findings across identity, infrastructure, applications, data, compliance, and resilience to create a clear enterprise risk picture. They will be responsible for defining and validating risks, reviewing supporting evidence, determining business impact and ownership, and helping leadership prioritize the most material issues. The role will also support documentation, onboarding playbooks, policy decisions, and validation efforts, with a particular focus on inherited risk and unresolved dependencies following acquisitions or organizational integration.

Day-to-Day:

Review findings across identity, infrastructure, applications, data, compliance, and resilience. Consolidate findings into a clear enterprise risk view. Define and validate risk statements, severity, evidence, ownership, and business impact. Identify and document inherited risks and post-acquisition dependencies. Prioritize material risks based on potential business impact. Build and maintain risk documentation and onboarding playbooks. Support policy decisions and validation oversight. Identify risks that span multiple teams or business entities and require coordinated remediation. Develop clear executive-level risk narratives and decision points. Help leadership determine remediation priorities and sequencing. Work with multiple technical and business stakeholders to ensure risks are accurately represented.