Risk Manager

undefined ago • 5 Years + • Risk Management • $135,000 PA - $165,000 PA

Job Summary

Job Description

The Risk Manager will support the Director of Risk & Security by leading internal audit and risk management activities across the organization. This hands-on role spans operational risk, IT and cybersecurity risk, third-party/vendor risk, compliance monitoring, policy governance, and business continuity planning. Responsibilities include overseeing end-to-end audit lifecycles, guiding enterprise risk assessments, driving remediation efforts, and influencing strategic decisions through high-impact reporting and advisory support. The ideal candidate combines technical risk fluency with people leadership and thrives in a cross-functional, fast-paced environment.
Must have:
  • Conduct enterprise-wide risk assessments.
  • Maintain risk register, control libraries, and mitigation plans.
  • Facilitate root cause analysis and corrective action planning.
  • Oversee audit planning, fieldwork, and reporting.
  • Lead process reviews and control testing.
  • Validate control effectiveness and ensure audit finding closure.
  • Assess and monitor third-party risk with IT and procurement.
  • Align risk management with cybersecurity frameworks (NIST, ISO).
  • Ensure adherence to internal policies and external regulations (SOX, GDPR, HIPAA).
  • Monitor compliance metrics and escalate issues.
  • Develop and maintain risk-related policies and training.
  • Prepare risk dashboards, heat maps, and executive summaries.
  • Liaise with external auditors, regulators, and business leadership.
  • Communicate complex risk issues to diverse stakeholders.
  • Collaborate with IT, Legal, and Product on risk assessments.
  • Promote a culture of risk awareness and continuous improvement.
Good to have:
  • Familiarity with GRC platforms (e.g., Hyperproof, Archer, ServiceNow GRC, MetricStream)
  • Experience working in regulated industries (e.g., SaaS, healthcare, financial services)
  • Working knowledge of cybersecurity, data privacy, or third-party risk management
Perks:
  • Competitive benefits and salaries
  • Personal and professional development opportunities
  • Flexibility
  • Health, dental, and vision coverage
  • Immediate enrollment in 401(k), HSA, and FSA plans
  • Flexible PTO policy
  • Tuition and personal enrichment reimbursement
  • Option to enroll in ID Theft Protection Program
  • Holistic well-being programs
  • Diversity, Equity, and Inclusion program

Job Details

Whether you’re an experienced professional or just getting started, your contributions matter at Fortra. If you’re passionate about tackling meaningful challenges alongside talented team members committed to helping each other succeed, all while having lots of fun, we want to hear from you. We offer competitive benefits and salaries, personal and professional development opportunities, flexibility, and much more!

At Fortra, we’re breaking the attack chain. Ready to join us?

Risk Manager will support the Director of Risk & Security by leading internal audit and risk management activities across the organization. This hands-on role is far-reaching—spanning operational risk, IT and cybersecurity risk, third-party/vendor risk, compliance monitoring, policy governance, and business continuity planning. You will be responsible for overseeing end-to-end audit lifecycles, guiding enterprise risk assessments, driving remediation efforts, and influencing strategic decisions through high-impact reporting and advisory support. The ideal candidate combines technical risk fluency with people leadership, and thrives in a cross-functional, fast-paced environment where building trust and transparency is critical to success.

WHAT YOU'LL DO

Team Leadership & Oversight

  • Conduct and coordinate enterprise-wide risk assessments to identify and evaluate current and emerging risks.
  • Maintain and refine the organization’s risk register, control libraries, and mitigation plans.
  • Facilitate root cause analysis and corrective action planning for key risk incidents, control failures, or audit findings.

Enterprise Risk & Control Management

  • Conduct and coordinate enterprise-wide risk assessments to identify and evaluate current and emerging risks.
  • Maintain and refine the organization’s risk register, control libraries, and mitigation plans.
  • Facilitate root cause analysis and corrective action planning for key risk incidents, control failures, or audit findings.

Internal Audit Management

  • Oversee audit planning, fieldwork, and reporting for operational, IT, financial, and compliance audits.
  • Lead walkthroughs, process reviews, and control testing across business functions.
  • Validate the effectiveness of controls and ensure timely closure of audit findings.

Third-Party & Cybersecurity Risk

  • Collaborate with IT and procurement teams to assess and monitor third-party risk, including due diligence, contract risk review, and ongoing monitoring.
  • Support the cybersecurity team in aligning risk management with NIST, ISO, and other security frameworks.

Compliance & Policy Governance

  • Ensure adherence to internal policies, external regulations (e.g., SOX, GDPR, HIPAA), and industry standards.
  • Monitor compliance metrics and escalate issues requiring executive visibility.
  • Contribute to the development and maintenance of risk-related policies, procedures, and training.

Reporting & Stakeholder Engagement

  • Prepare risk dashboards, heat maps, and executive summaries for the Director of Risk & Security, senior leadership, and audit committees.
  • Serve as a key liaison for external auditors, regulators, and business unit leadership.
  • Communicate complex risk issues in a clear, compelling manner to both technical and non-technical stakeholders.

Cross-Functional Collaboration

  • Work closely with IT, Legal, Product, and other departments to assess operational, cybersecurity, and third-party risks.
  • Promote a culture of risk awareness and continuous improvement throughout the organization.

QUALIFICATIONS

  • Bachelor’s degree in Risk Management, Business, Accounting, Information Security, or related field.
  • 5+ years of relevant experience in risk management, internal audit, or compliance.
  • 2+ years in a people leadership role.
  • Professional certifications such as CRMA, CISA, CIA, or equivalent preferred.
  • Strong knowledge of risk frameworks (e.g., COSO, ISO 31000, NIST).
  • Work experience and/or background in technology based roles or industry
  • Excellent communication, analytical, and stakeholder engagement skills.
  • Ability to manage multiple priorities in a dynamic, fast-paced environment.

PREFERRED SKILLS

  • Familiarity with GRC platforms (e.g., Hyperproof, Archer, ServiceNow GRC, MetricStream).
  • Experience working in regulated industries (e.g., SaaS, healthcare, financial services).
  • Working knowledge of cybersecurity, data privacy, or third-party risk management.

3408

At Fortra, our compensation philosophy prioritizes fair market value and internal equity, aligning with your experience and specialized skill set.

As a full-time, exempt employee at Fortra, you’ll enjoy a comprehensive benefits package that includes:

  • Health, dental, and vision coverage as of hire
  • Immediate enrollment in 401(k), HSA, and FSA plans
  • Flexible PTO policy
  • Tuition and personal enrichment reimbursement
  • Option to enroll in ID Theft Protection Program

Check out some of the of the other benefits we offer that are focused on your holistic well-being and our Diversity, Equity, and Inclusion program.

Compensation

$135,000 - $165,000 USD

Visit our website to learn more about why employees choose to work for Fortra. Remember to connect with us on LinkedIn.

As an EEO/Affirmative Action Employer, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, veteran or disability status.

Create a Job Alert

Interested in building your career at Fortra? Get future opportunities sent straight to your email.

Create alert

Apply for this job

  • indicates a required field

Autofill with Greenhouse

First Name*

Last Name*

Email*

Phone*

Resume/CV*

AttachAttach

Dropbox

Google Drive

Enter manuallyEnter manually

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

AttachAttach

Dropbox

Google Drive

Enter manuallyEnter manually

Accepted file types: pdf, doc, docx, txt, rtf

---

Are you currently employed?*

Select...

Date Available For Employment?*

Have you ever been employed by Fortra?*

Select...

Have you previously applied for employment with Fortra?*

Select...

Do you now, or will you in the future, require any form of sponsorship to work in the United States? *

Select...

For purposes of this question " sponsorship to work in the United States' means "an H-IB visa petition, an 0-1 visa petition, a CPT visa petition, an E-3 visa petition, TN status and 'job flexibility benefits' (also known as 1-140 portability or Adjustment of Status portability) for long-delayed adjustment of status applications that have been pending for 180 days or longer." (Please ask us if you are uncertain whether you may need immigration sponsorship or desire clarification.)

Confirmation of Privacy Policy*

Select...

Our complete Privacy Policy can be found here.

LinkedIn Profile (optional)

What is your desired salary range for the position to which you are applying?

Please list a range (numeric values only)

---

U.S. Standard Demographic Questions

We invite applicants to share their demographic background. If you choose to complete this survey, your responses may be used to identify areas of improvement in our hiring process.

How would you describe your gender identity? (mark all that apply)

Select...

How would you describe your racial/ethnic background? (mark all that apply)

Select...

How would you describe your sexual orientation? (mark all that apply)

Select...

Do you identify as transgender?

Select...

Do you have a disability or chronic condition (physical, visual, auditory, cognitive, mental, emotional, or other) that substantially limits one or more of your major life activities, including mobility, communication (seeing, hearing, speaking), and learning?

Select...

Are you a veteran or active member of the United States Armed Forces?

Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Fortra’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Gender

Select...

Are you Hispanic/Latino?

Select...

Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran Status

Select...

Voluntary Self-Identification of Disability

Form CC-305

Page 1 of 1

OMB Control Number 1250-0005

Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury

Disability Status

Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Submit application

Similar Jobs

Looks like we're out of matches

Set up an alert and we'll send you similar jobs the moment they appear!

Similar Skill Jobs

Looks like we're out of matches

Set up an alert and we'll send you similar jobs the moment they appear!

Jobs in United States

Looks like we're out of matches

Set up an alert and we'll send you similar jobs the moment they appear!

Risk Management Jobs

Looks like we're out of matches

Set up an alert and we'll send you similar jobs the moment they appear!

About The Company

At Fortra, we’re not just responding to cyber threats but anticipating them, planting obstacles, and breaking the attack chain. Fortra is a global cybersecurity company offering advanced offensive and defensive security solutions that deliver comprehensive protection across the cyber kill chain. Armed with a team of passionate experts driven by a shared purpose, we work together to empower our clients with the tools, intelligence, and expertise to safeguard what matters most. Fortra provides equal opportunity to all employees and applicants without regard to race, color, creed, religion, national origin, sex, sexual orientation, disability, genetic information, status as a covered veteran, age, marital status, membership or activity in a local human rights commission, status with regard to public assistance or any other protected characteristic.

United States (On-Site)

Armenia (On-Site)

United States (Remote)

United States (On-Site)

United States (On-Site)

United States (On-Site)

Barcelona, Catalonia, Spain (Remote)

View All Jobs

Get notified when new jobs are added by Fortra

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug