Cybersecurity Risk Manager

Role Description The Cybersecurity Risk Manager is a part-time, remote role responsible for overseeing and improving Empower Pulse’s information security and risk management practices. This role includes identifying, assessing, and prioritizing cybersecurity risks across platforms and processes, and recommending mitigation strategies aligned with business objectives. The Cybersecurity Risk Manager will develop and maintain security policies, standards, and procedures, and collaborate with product and engineering partners to embed security controls into systems and workflows. Day-to-day tasks involve monitoring for threats and vulnerabilities, reviewing security incidents, supporting incident response, and ensuring compliance with relevant data protection and privacy requirements. The role also includes preparing concise risk reports for leadership, supporting vendor and third-party risk assessments, and promoting security awareness across the organization.

Qualifications

• Strong background in cybersecurity risk management, including experience with risk assessment frameworks, threat modeling, and control implementation.
• Knowledge of information security principles, including access control, network security, application security, encryption, and secure configuration practices.
• Familiarity with regulatory and industry standards such as ISO 27001, NIST frameworks, and data privacy regulations (e.g., GDPR, CCPA) is highly beneficial.
• Experience conducting vulnerability assessments and security reviews of cloud-based platforms and third-party services.
• Ability to analyze complex technical information and communicate clear, actionable risk insights and recommendations to non-technical stakeholders.
• Demonstrated skill in developing security policies, procedures, and guidelines that align with business needs and scale with growth.
• Strong organizational and time-management skills, with the ability to manage part-time workloads effectively in a remote environment.
• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field; relevant certifications (e.g., CISSP, CISM, CRISC, Security+) are a plus.
• Experience working with startups or digital platforms focused on content, branding, or professional services is an advantage.