Manager Cyber & IT Risk - Financial Sector

As a Cyber and IT Risk Consultant, you will play a key role in helping financial institutions navigate the complex intersection of cybersecurity, regulatory compliance, and risk management. You’ll collaborate with a diverse range of clients - from major FMIs and banks to innovative payment providers - while contributing to a culture that values inclusion, diverse perspectives, and work–life balance. What you will work on: Client Delivery & Advisory Lead cyber and IT risk assessments for financial institutions, including identifying and assessing risks, developing and implementing risk mitigation strategies, and providing recommendations to improve the overall security posture. Conduct independent reviews of IT and cyber security controls, including penetration testing and vulnerability assessments, to identify weaknesses and provide recommendations for remediation. Support clients in developing and implementing IT and cyber security policies, procedures, and standards aligned with industry best practices and regulatory requirements. Provide advisory services on topics such as cyber threat intelligence, incident response planning, and data privacy. Assist clients in preparing for and responding to regulatory examinations and audits related to IT and cyber security. Stay up-to-date on the latest cyber security threats, vulnerabilities, and industry trends to provide informed recommendations to clients. Support business development activities, including proposal writing and client presentations. Contribute to the development of thought leadership and knowledge sharing within the team. What you bring to the role: Bachelor's degree in a relevant field such as Computer Science, Information Security, or a related area. Proven experience (typically 5+ years) in IT and/or cyber security risk management, preferably within the financial services industry. Strong understanding of IT and cyber security risk management frameworks and standards, such as NIST, ISO 27001, and COBIT. Familiarity with relevant regulatory requirements and guidelines, such as those from the Federal Financial Institutions Examination Council (FFIEC), the New York Department of Financial Services (NYDFS), and the European Central Bank (ECB). Experience in conducting risk assessments, developing security policies and procedures, and implementing security controls. Experience with penetration testing and vulnerability assessments. Excellent communication, interpersonal, and presentation skills, with the ability to effectively communicate complex technical information to both technical and non-technical audiences. Strong analytical and problem-solving skills, with the ability to identify and assess risks and develop effective mitigation strategies. Ability to work independently and as part of a team, managing multiple projects and priorities. Relevant certifications such as CISSP, CISM, CRISC, or CISA are a plus. What we offer: Competitive salary and benefits package. Opportunities for professional development and training. A collaborative and supportive work environment. The chance to work with a diverse range of clients and projects. Flexible work arrangements. A culture that values work–life balance. The opportunity to make a real impact on the security of financial institutions. Inclusion & Diversity At [Company Name], we are committed to fostering an inclusive and diverse work environment. We believe that diverse perspectives and experiences make us a stronger and more innovative organization. We encourage applications from all qualified individuals.