Director – Risk Assessment

Job not on LinkedIn

October 14

🏈 Ohio – Remote

Although this job is listed in Ohio, this company may be open to hiring remote in other states.

💵 $140k - $200k / year

⏰ Full Time

🔴 Lead

🎲 Risk

Apply Now

Receive Emails with Similar Jobs

Signet Jewelers

WebsiteLinkedInAll Job Openings

Retail • eCommerce • Fashion

Signet Jewelers is the world's largest retailer of diamond jewelry, with a focus on bringing quality jewelry that expresses love and inspires trust among customers. The company owns several well-known brands such as Kay Jewelers, Zales, Jared, and Blue Nile, offering a wide range of fine jewelry and customizable designs. They emphasize sustainability and responsible sourcing in their operations. Signet aims to help people celebrate life and express love through their products while promoting human rights and preserving the environment. They have a strong market presence in the United States, Canada, and the UK.

10,000+ employees

Founded 1949

🛒 Retail

🛍️ eCommerce

👗 Fashion

📋 Description

• Manage and evolve the vendor risk assessment program. • Design the due diligence process, implement risk mitigation strategies, and work with procurement and legal to ensure contractual security clauses are enforced. • Manage vendor cybersecurity risk across the global supply chain. • Implement frameworks such as NIST CSF and develop risk scores based on vendors’ impact and criticality to the business. • Champion third-party cybersecurity risk across the organization. • Conduct continuous monitoring, lead incident response coordination for vendor-related breaches, and provide executive reporting. • Report regularly to senior leadership, including CISO, on the state of third-party security risk. • Maintain a risk register of critical vendor findings, ensure timely remediation, and track SLAs. • Serve as the primary contact for vendor security discussions, due diligence support, and ongoing relationship management. • Provide guidance to business units and project teams during vendor selection and procurement processes. • Optionally, review vendor Data Protection Impact Assessments (DPIAs) and participate in privacy-related risk analysis.

🎯 Requirements

• Bachelor’s degree, or equivalent experience. • Certifications a plus. • 10+ years related experience. • Experience in project management, from conception to delivery. • Experience in managing large, complex projects and large teams. • Experience managing consultants/contractors at scale. • Extensive experience with a variety of security control tools and processes.

🏖️ Benefits

• Competitive healthcare, dental & vision insurance • 401(k) matching after one year of employment • Generous time off + company holidays • Merchandise discount • Learning & Development programs • Much more!