Principal, Cybersecurity Risk
Fidelity Investments is a privately held, Boston-headquartered financial services company providing investing, trading, retirement, wealth management, brokerage, workplace benefits, custody and clearing, and digital-asset services.
About Fidelity Investments
Fidelity serves individual investors, employers, wealth-management firms, institutions, innovators, and charitable donors through diversified financial-services businesses. Current offerings include brokerage and trading, mutual funds and exchange-traded products, retirement and workplace savings, financial planning and advice, wealth management, institutional custody and clearing, and crypto/digital-asset products.
Skills
Candidate Availability
About the Role
You will lead the creation of cyber risk analysis for Enterprise Cybersecurity. You will identify key risk scenarios, join risk and threat modeling sessions, advise on exceptions and audit finding risk levels, quantify cyber risk, and present analyses to technical and executive audiences.
Requirements
- Minimum 3-5 years of risk experience quantifying cyber risk scenarios
- Experience in cybersecurity risk management, assessment frameworks, and metrics reporting
- End-to-end project management experience
- Experience with governance, risk, and compliance tools
- Advanced understanding of NIST 800-53, CRI, and FAIR
- Excellent communication and presentation skills
- CRISC, CISSP, or CISM preferred
Responsibilities
- Lead creation of cyber risk analysis for ECS
- Determine key risk scenarios for ECS Product Areas
- Participate in risk and threat modeling sessions
- Advise on exceptions and audit finding risk levels
- Quantify cyber risk and present analyses to senior management
- Determine appropriate controls for cybersecurity risks
- Compare findings to existing ECS policies and uncover gaps
- Draft policy enhancements to close gaps