Cyber Security Risk and Compliance Manager

: As the Cyber Security Risk and Compliance Manager you will bring a deep understanding of cybersecurity principles, risk management methodologies (such as NIST CSF and 800-53), and the ability to communicate effectively with both technical and non-technical stakeholders. The Cyber Security Senior Specialist has a profound impact on the organization by proactively managing risks and is integral to maintaining a secure digital environment. They will be responsible for the ongoing management and activities within the cyber security risk program which include risk identification, assessment, management, and reporting. Position is remote with the expectation to attend large office gatherings a needed. This manager role is an individual contributor role. What you'll do

• Conduct risk assessments to identify and evaluate potential cybersecurity risks
• Develop and implement strategies to identify, aggregate, and mitigate cybersecurity risks
• Review and map security findings to risk register entries with the GRC tool
• Communicating aggregated risk information and reports in a clear and understandable manner to key stakeholders
• Implement mechanisms for continuous monitoring of risks and updating the risk entries

Basic qualifications

• 4 or more years of work experience within cyber security, cyber security risk and compliance, information technology, or internal audit
• 1 or more years of experience with creating and documenting risk methodologies, maintaining risk registers, or initiating and executing risk assessments

Preferred qualifications

• Bachelor's or advanced degree in Business, IT, Computer Science, Engineering, or related field or equivalent work experience
• Previous experience working with Archer or other Governance, Risk and Compliance (GRC) tools
• Excellent written and oral communication skills, inter-personal skills, and effective skills to support risk programs
• Ability to communicate effectively across all levels of the organization; provide formal reports and presentations to senior levels as required
• Knowledge of NIST and HIPAA/HITRUST; general understanding of other governance frameworks, such as PCI, Sarbanes Oxley (SOX), COBIT a plus

What's in it for you We're committed to helping our people thrive at work and at home. We offer generous benefits that address your total well-being and provide support as you need it, especially key moments in your life. Our benefits include:

• Competitive pay
• Generous employee discount
• Physical and mental well-being support

About us As part of the Best Buy team, you'll help us fulfill our purpose to enrich lives through technology. We bring that to life every day by humanizing and personalizing tech solutions for every stage of life — in our stores, online and in customers' homes. Our culture is built on deeply supporting and valuing our amazing employees who make it all possible. We're committed to being a great place to work, where you can unlock unique career possibilities. Above all, we aim to provide a place where you can bring your full, authentic self to work now and into the future. Tomorrow works here.™