> Markdown version of [/jobs/ext/2946212-manager-technology-and-cybersecurity-risk-risk-data-analyst](https://www.wearedevelopers.com/jobs/ext/2946212-manager-technology-and-cybersecurity-risk-risk-data-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Manager, Technology and Cybersecurity Risk / Risk Data Analyst - **Company:** Genworth Financial, Inc. - **Location:** Richmond, VA, United States - **Experience:** Expert - **Salary:** $109,000.0 - $169,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Excel, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Data Analysis, Software System Penetration Testing, Microsoft Azure, Cloud Computing, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Data Infrastructure, Data Integrity, Disk Controller, Identity and Access Management, Python (Programming Language), Microsoft PowerPoint, Windows PowerShell, Raw Data, Power BI, Smartsuite, SQL Databases, Software Vulnerability Management, Data Processing, Scripting, Google Cloud, IT General Controls (ITGC), Microsoft Power Automate, System Availability, Generative AI, Malware, Information Technology, Cybercrime, Data Analytics, RSA Archer Platform, CIS Benchmarks, Servicenow - **Published:** September 16, 2026 - **Apply:** https://gnw.wd1.myworkdayjobs.com/GNW/job/Richmond-Virginia/Manager--Technology-and-Cybersecurity-Risk---Risk-Data-Analyst_REQ-260380-1 ## About the Role * 5+ years of experience in one or more of the following: Technology / Cyber Risk, Risk Management / GRC, or Risk Data Analytics. * Experience conducting risk assessments and managing remediation activities. * Familiarity with industry risk and control frameworks (e.g., NIST, ISO, SOC). Technical & Analytical Skills * Strong proficiency in Power BI (dashboarding, data modeling). * Advanced Microsoft Excel skills for analytics and data manipulation. * Advanced PowerPoint skills for executive presentations. * Experience building dashboards, reports, and risk analytics. * Ability to translate data into insights and actionable recommendations. Automation & AI * Experience using Power Automate or similar workflow automation tools. * Familiarity with AI / Generative AI tools to improve productivity and analysis. * Experience in leveraging API's to access, share and aggregate data. Communication Skills * Strong written and verbal communication skills. * Proven ability to create executive-level storytelling and presentations. * Ability to translate technical concepts into business-friendly language. Education * Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Business, Risk Management, Finance, or a related field. Nice to have * Professional certifications such as CISA, CRISC, CISM, CISSP, CTPRP, or PMP. * Master's degree (MBA, MS Cybersecurity, or related field). * Experience with GRC platforms (e.g., Archer, ServiceNow GRC, OneTrust). * Knowledge of cloud platforms (AWS, Azure, GCP). * Experience with scripting or data tools (SQL, Python, PowerShell). * Experience presenting to senior leadership or risk committees. ## Description The Enterprise Manager, Technology and Cybersecurity Risk / Risk Data Analyst is a senior individual contributor responsible for identifying, assessing, monitoring, and reporting risks across technology, cybersecurity, and third-party domains, while leading risk data analytics, reporting, and automation efforts. This role combines strong expertise in technology, cybersecurity, and third-party risk management with advanced capabilities in data analytics, executive storytelling, and automation, leveraging tools such as Power BI, Power Automate, PowerPoint, and AI-enabled solutions to modernize risk management processes and deliver actionable insights to leadership. At the Manager level, this role operates with minimal supervision, significant independent judgment, and cross-functional influence, contributing to key organizational risk objectives. What you will be doing 1. Technology Risk Management * Lead and execute enterprise-wide technology risk assessments across applications, infrastructure, cloud platforms, and data environments. * Identify, evaluate, and prioritize risks related to system availability, security, resilience, and data integrity. * Maintain and manage the technology risk register, including risk identification, scoring, and remediation tracking. * Evaluate and challenge the design and effectiveness of IT general controls (ITGCs) and application controls. * Align risk and control frameworks to industry standards (e.g., NIST, ISO 27001, COBIT, SOC 2, CIS Controls). * Partner with Technology and Security teams to drive control improvements and remediation of identified risks. * Support risk appetite and tolerance definition, including development and monitoring of key risk indicators (KRIs). * Provide oversight and challenge to ensure risks are properly identified and managed within technology initiatives, projects, and change efforts. * Support regulatory, audit, and compliance activities by providing documentation, evidence, and subject matter expertise. * Monitor emerging technology risks (e.g., cloud, AI, cyber threats) and translate them into actionable mitigation strategies. 2. Cybersecurity Risk Oversight * Lead cybersecurity risk assessments across enterprise environments (on-prem, cloud, hybrid) * Partner with Information Security leadership to identify and prioritize cyber risks * Evaluate cybersecurity controls across key domains: + Identity & Access Management (IAM) + Data protection & encryption + Network and endpoint security + Incident response capabilities * Assess alignment to frameworks (NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls) * Oversee vulnerability management, penetration testing, and remediation tracking * Support cyber incident readiness (tabletop exercises, post-incident reviews) * Evaluate risks in emerging areas (cloud, AI, ransomware, supply chain threats) * Monitor evolving threat landscape and regulatory expectations * Develop cybersecurity KRIs and executive reporting * Provide independent risk challenge to security initiatives and control designs 3. Contribute to AI / generative AI cybersecurity risk management3. Risk Data Analytics & Reporting * Collect, validate, and analyze risk data from multiple sources (GRC tools, security platforms, vendor systems). * Develop and maintain Power BI dashboards (risk registers, KRIs, vendor risk metrics, trend analysis). * Produce executive-level PowerPoint presentations with clear, compelling risk narratives. * Identify trends, anomalies, and emerging risks through advanced data analysis. * Support data-driven decision-making through actionable insights and visualization. * Ensure data accuracy, governance, and repeatability of reporting processes. 4. Automation & AI Enablement * Design and implement Power Automate workflows to streamline risk processes (e.g., assessments, approvals, reporting). * Identify and eliminate manual processes through automation and process optimization. * Leverage AI and Generative AI tools to enhance reporting, summarization, and analysis. * Implement continuous improvement initiatives to increase efficiency and reduce cycle time. * Support responsible use of AI by identifying and mitigating associated risks (e.g., data privacy, bias, accuracy). ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Beyond Dashboards: Fixing Text-to-SQL with Semantic RAG](https://www.wearedevelopers.com/videos/2036-beyond-dashboards-fixing-text-to-sql-with-semantic-rag) - [Data Governance in the Era of AI](https://www.wearedevelopers.com/videos/1622-data-governance-in-the-era-of-ai) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Full Spectrum File Uploads](https://www.wearedevelopers.com/videos/870-full-spectrum-file-uploads) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Data Analyst Salary in Switzerland](https://www.wearedevelopers.com/magazine/276-data-analyst-salary-in-switzerland)