[Hiring] Risk Lead, IT Risk Management @Cisco

Role Description

The role is listed as remote and can be performed from anywhere in the US.

Meet the Team: Commerce Engineering Productivity & Platforms (CEP&P) is a fast-paced, multifaceted engineering organization that adapts quickly to changing business and technology needs. We are launching IT Risk Management (ITRM) to support all of Cisco AI + IT with real-time risk insight, resilience testing, and closed-loop remediation.

Your Impact:

• Lead ITRM as an expert practitioner at the leading edge of AI-enabled risk management.
• Define the standard and methodology, using AI and agentic tools to turn fragmented signals into risk intelligence.
• Build the assurance model that tests resilience, control effectiveness, and AI safeguards.
• Guide where AI can safely detect, prioritize, act, test, and verify.
• Challenge disaster-recovery capability with evidence rather than accepting plans at face value.
• Ensure the organization confirms that remediation held.
• Own the ITRM standard and methodology: risk sensing, aggregation, prioritization, risk appetite, taxonomy, thresholds, and common methods.
• Lead the AI-enabled risk intelligence model.
• Define the assurance model for critical service outcomes, failure tolerances, resilience, control effectiveness, and AI lifecycle safeguards.
• Operate the closed-loop model through named owners, action tracking, risk acceptance and escalation paths, and verification that risk reduction actually occurred.
• Provide technical thought leadership on AI-enabled risk management.

Qualifications

• 12+ years of experience in IT risk, GRC, audit, control assurance, or technology risk program management.
• Experience establishing a common risk framework, taxonomy or scoring method, enterprise risk register, and recurring executive review cadence.
• Experience partnering with executive team members and domain owners to define RACI, escalation paths, risk acceptance, and decision rights.
• Experience working across at least two of the following domains: SOX or control assurance, vulnerability management, lifecycle management, business continuity or disaster recovery, application resiliency, CMMC, or GRC or audit.

Preferred Qualifications

• Bachelor’s degree or equivalent experience in Information Systems, Risk Management, Computer Science, Business, or a related field.
• Demonstrated experience applying AI, agentic workflows, automation, or sophisticated analytics to technology risk, security, resilience, control assurance, or operations.
• Experience leading evidence-based resilience, control-effectiveness, or AI lifecycle testing.
• Experience connecting fragmented risk or compliance programs into a common operating model.
• Experience building closed-loop risk management with named owners, action tracking, verified closure, and measures such as automation coverage, signal-to-action time, or repeat-risk reduction.
• Fosters candid communication and balanced debate.

Benefits

• Medical, dental and vision insurance.
• 401(k) plan with a Cisco matching contribution.
• Paid parental leave.
• Short and long-term disability coverage.
• Basic life insurance.
• 10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees.
• 1 paid day off for employee’s birthday, paid year-end holiday shutdown, and 4 paid days off for personal wellness.
• Non-exempt employees receive 16 days of paid vacation time per full calendar year.
• Exempt employees participate in Cisco’s flexible vacation time off program.
• 80 hours of sick time off provided on hire date and each January 1st thereafter.
• Optional 10 paid days per full calendar year to volunteer.