> Markdown version of [/jobs/ext/2550874-senior-risk-manager-information-security](https://www.wearedevelopers.com/jobs/ext/2550874-senior-risk-manager-information-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Risk Manager - Information Security - **Company:** Omnissa, LLC - **Location:** Mountain View, CA, United States (Remote available) - **Experience:** Expert - **Salary:** $175,000.0 - $220,000.0 - **Contract:** Permanent contract - **Skills:** JIRA, Cloud Computing, Cyber Security, Information Systems, Atlassian Tools, RSA Archer Platform, Servicenow - **Published:** August 14, 2026 - **Apply:** https://www.jofdav.com/jobs/59219229-senior-risk-manager-information-security ## About the Role * 8+ years of experience in risk management, GRC, or a closely related field; 3+ years in a people management role. * Deep knowledge of risk management frameworks (COSO ERM, ISO 31000, NIST RMF, or equivalent). * Demonstrated experience operating an enterprise risk program in a mid-to-large organization. * Strong analytical and communication skills; able to present risk information clearly to technical and non-technical audiences, including executives. * Proven ability to influence and build relationships across organizational levels without direct authority. * Bachelor's degree in business, Finance, Information Systems, or a related field. * Professional certification such as CRISC, CISM, CGEIT, or equivalent. * Experience in regulated industries (financial services, healthcare, technology). * Familiarity with GRC platforms (e.g., ServiceNow GRC, Archer, OneTrust, LogicGate). * Master's degree (MBA, MS Risk Management, or related discipline). * Strategic thinking and risk-based decision-making * Leadership and team development * Stakeholder management and executive communication * Analytical rigor and attention to detail * Adaptability in a fast-paced, evolving environment * Strong working knowledge of enterprise tools such as JIRA, Atlassian Cloud, Claude, Anecdotes and Process Unity. Location: Remote Travel Expectations: None Education: Bachelor's Degree or equivalent combination of education and relevant professional experience. ## Description Omnissa is in search for a Senior Manager, Risk Management to lead the enterprise risk management function within the GRC team. This individual is accountable for designing, operating, and continuously maturing the organization's risk identification, assessment, and treatment framework. The role partners closely with business units, IT, Legal, Compliance, and executive leadership to ensure that risk posture is well-understood, documented, and appropriately managed. Here is a breakdown: What You'll Do * Own and operate the enterprise risk management framework, including risk appetite statements, risk registers, and risk reporting cadences. * Lead periodic risk assessments across business functions, identifying emerging threats and evaluating the effectiveness of existing controls. * Maintain and evolve risk taxonomy, scoring methodologies, and heat maps aligned to industry best practices (e.g., COSO ERM, ISO 31000). * Drive integration of risk management into strategic planning, product development, and change management processes. * Prepare and present risk reports for senior leadership, the Board, and audit/risk committees, translating complex risk data into actionable insights. * Establish and track key risk indicators (KRIs) and ensure timely escalation of critical risk events. * Maintain risk management policies, standards, and procedures; drive policy review cycles and updates. * Serve as a trusted advisor to business unit leaders on risk-related matters, helping embed a risk-aware culture. * Collaborate with IT Security, Legal, Privacy, and Internal Audit teams on integrated risk and control activities. * Support third-party and vendor risk management activities in coordination with Procurement and IT. * Lead, mentor, and develop a team of risk analysts and specialists within the GRC function. * Set team goals, manage performance, and foster a culture of continuous improvement and professional development. * Drive process automation and tooling improvements to enhance risk program efficiency and scalability. * Coordinate risk management contributions to internal and external audits, regulatory examinations, and compliance assessments. * Monitor the evolving regulatory landscape and assess implications for the organization's risk profile. ## Related Videos - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)