Principal, Cybersecurity Risk

The role

Fidelity will not provide immigration sponsorship for this position.

The Enterprise Cybersecurity Risk (ECS Cyber Risk) team is seeking an experienced Principal-level risk professional to lead in the creation of cyber risk analysis pertaining to ECS. The candidate will understand current and emerging cybersecurity risks and determine key risk scenarios for the ECS Product Areas. The candidate will participate in risk / threat modeling sessions to prioritize top risks. The candidate will advise on both exceptions and audit finding risk levels to drive down the number of exceptions and accurately risk rate audit findings.

All jobs

Principal, Cybersecurity Risk

Fidelity Investments, Durham, NC

Posted pay

Pay not posted

Location: Durham, NC
Work type: Not given
Level: Principal
Experience: 3+ years
Posted: 2 days ago
Last check: 2 days ago
Job type: Security engineering

Apply on the Fidelity Investments site Make a résumé and a cover letter for this job Sign in to save

The Fidelity Investments site opens in a new tab.

Fidelity Investments

Open tech jobs: 153
With posted pay: 35%
Median posted base: $107K–$216K

About Fidelity Investments: funding, hiring and pay

Fidelity Investments

About Fidelity Investments: funding, hiring and pay

Interview questions

No one has reported an interview at Fidelity Investments yet. Did you interview there? Add the questions.

Check my fit

Compare your résumé with this job. See where you match, what is missing and which lines to change.

Make a résumé and a cover letter for this job

Paste your résumé, or use the résumé on your profile.
Get the résumé as a PDF and the letter as text. We use only the facts in your résumé.
Apply on the Fidelity Investments site.

Open the apply kit

The role

Fidelity will not provide immigration sponsorship for this position.

The Expertise and Skills You Bring

Minimum 3-5 years of risk experience quantifying cyber risk scenarios and presenting data in a meaningful and insightful way to senior leaders.
Demonstrated experience in cybersecurity risk management, assessment frameworks, and metrics reporting.
Experience managing projects end-to-end, from initial stages of acquiring data from multiple sources and subject matter experts to the tracking, maintenance, and closure of a project, with proven ability to integrate data into risk analysis tools and communicate progress effectively across multiple lines and levels.
Use and understanding of governance, risk, and compliance tools.
Advanced understanding of NIST 800-53 Cybersecurity Framework, Cybersecurity Risk Institute (CRI), and FAIR
CRISC, CISSP, or CISM certifications are preferred.
You have effective communication and excellent presentation skills to senior leaders.
You can deep dive into metrics that will both (1) quantify the work being done and (2) quantify how cyber risk position has improved.
Critical thinking skills to ask detailed questions and fully vet answers to uncover discrepancies and gaps others may not have found is a must.
You can work across business lines to influence change and help mitigate cyber risk.
You have an intermediate understanding of risks pertaining to the following: cloud security, access controls, encryption, vendor security, data exfiltration, application security, perimeter security, customer protection, privileged access, denial of service, unpatched vulnerabilities, and end of life software.
You operate in a fast-paced environment and can complete analyses quickly and accurately integrating new cybersecurity data into risk models as it emerges.
You bring an investigator mindset to deep dive into metrics to understand and communicate actionable risk to business and technology groups.
Determining the appropriate controls for cybersecurity risks
Working with asset inventory and asset management
Evaluating multiple sources, reports, industry trends to compare risk related findings to existing ECS policies and uncover gaps and opportunities for process improvement.
Determining what, who, and where changes are warranted to close gaps, working with appropriate contacts to draft policy enhancement ensuring continued progress.

Principal, Cybersecurity Risk

The role

Principal, Cybersecurity Risk

The role

The team

The Expertise and Skills You Bring

Category

Similar jobs at other companies

Cybersecurity Architect (GRC & Risk)

Head of Infrastructure & Cloud Security

Platform Risk Manager

Staff/Principal Security Engineer

Senior Information Security Engineer

Enterprise & Cloud Security Manager

Interview questions

Fidelity Investments