Risk Manager - Cyber

Join to apply for the Risk Manager - Cyber role at myGwork - LGBTQ+ Business Community

2 days ago Be among the first 25 applicants

Join to apply for the Risk Manager - Cyber role at myGwork - LGBTQ+ Business Community

This job is with Moody's, an inclusive employer and a member of myGwork the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly.

Location(s):

• 1414 S Tryon Street, 7th Floor, The Railyard Floors 5-8, Charlotte, North Carolina, 28203, US
• 901 Yamato Rd., Suite 210E, Boca Raton, Florida, 33431, US
• 120 North LaSalle, Suite 1700, Chicago, Illinois, 60602, US
• 1010 N. 102nd Street, Suite 100, Omaha, Nebraska, 68114, US

Line Of Business: Data Estate(DE)

Job Category:

• Corporate Services

Experience Level: Experienced Hire

At Moody's, we strive to create an inclusive environment where everyone feels welcome to be who they are. We value curiosity, diversity, integrity, and innovation.
If you are excited about this opportunity but do not meet every requirement, please apply! You may still be a great fit or suitable for other roles. We seek candidates who embody our values: investing in relationships, leading with curiosity, championing diversity, turning inputs into actions, and upholding trust with integrity.
Join us in the Data Estatewhere were redefining data management and analytics. Our mission is to deliver precise, timely data with innovation at the core, leveraging Generative AI and advanced data capabilities to support Moodys strategic objectives and growth. Be part of a team shaping the future of data and making a real impact.

The Assistant Director of Risk Management will focus on delivering secure web applications through application security services, including code reviews, threat modeling, and overseeing the secure Software Development Life Cycle (SDLC).
This role requires expertise in application security, providing consultative guidance to development teams on vulnerabilities identified through assessments and code reviews. Ability to work independently and collaboratively is essential.
Responsibilities Include:

• Delivering centralized application security services
• Providing security functions aligned with the corporate security plan
• Managing risk posture, regulatory compliance, and security plan coordination with the Senior Director of Risk Management
• Monitoring and communicating security tasks, events, and trends
• Identifying, monitoring, and reporting risk items
• Developing and reporting key metrics
• Documenting the application security program (policies, guidelines, best practices, checklists)
• Mentoring security champions and analysts
• Performing other related duties as assigned

Qualifications:

• Bachelor's degree in relevant fields preferred
• Security certifications desirable
• 6+ years of information security experience in large, complex environments
• 3+ years experience in application security risk assessment and remediation
• Strong knowledge of security assessment methodologies, vulnerabilities, and secure coding practices
• Experience with automated tools (Qualys, Splunk, Prisma Cloud) and manual assessment techniques
• Analytical troubleshooting skills
• Knowledge of web technologies (.ASP, .NET, Java)
• Exposure to Security Maturity Models
• Effective collaboration and communication skills

For US-based roles, the salary range is $98,400 - $142,800, with additional benefits and incentives. Moodys is an equal opportunity employer, committed to diversity and inclusion. Reasonable accommodations are available for applicants with disabilities or religious beliefs. For inquiries about accommodations, email

This position may be considered a promotional opportunity under the Colorado Equal Pay for Equal Work Act. Please review our policies and legal notices linked in the original description.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Finance and Sales