Staff Cyber Risk Program Manager

February 20

Apply Now

Receive Emails with Similar Jobs

EDB

WebsiteLinkedInAll Job Openings

EDB is a company focused on providing advanced software solutions and services for database management. It specializes in PostgreSQL, an open-source database management system, and helps organizations deploy, run, and scale their data infrastructure efficiently and securely. EDB offers tools and support for database optimization, migration, and performance tuning, making it a valuable partner for enterprises looking to maximize their data capabilities.

open source database • database • Postgres • oracle compatibility • PostgreSQL

501 - 1000 employees

Founded 2004

🏢 Enterprise

🤝 B2B

💰 Venture Round on 2019-10

📋 Description

• Own the full lifecycle of EDB’s Third-Party Risk Management (TPRM) program, including policy development, operational execution, continuous monitoring, and enhancements. • Assess and monitor vendor security risks, conducting annual reviews and continuous monitoring activities. • Work with vendor owners to ensure proper security controls are understood and implemented when onboarding and deploying new vendors. • Evaluate third-party risks in new products, directory applications, integrations, partners, and services, ensuring alignment with EDB’s security and compliance requirements. • Support EDBs Cyber Risk Management Framework by conducting risk assessments using EDB’s common control framework against a combination of infrastructure, development, and business domains. • Identify risk findings, gaps and deficiencies in EDB’s existing control set, guiding control owners towards effective implementation and remediation of controls. • Improve operational risk management with engineering teams, prioritizing security debt reduction through strategic investment into risk remediation.

🎯 Requirements

• Proven experience in Third-Party Risk Management (TPRM), including policy development, vendor assessments at all levels, and continuous monitoring of organizations vendor attack surface. • Experience conducting technical security control analysis in regulated environments, ensuring compliance with industry standards. • Ability to identify, assess, and monitor vendor security risks, including continuous monitoring of portfolio. • Proficiency in asset discovery across data, systems, and cloud/on-prem environments using a variety of tools and methodologies. • Expertise in auditing security objectives for one or more frameworks: SOC 2, PCI, HIPAA, FedRAMP (800-53), ISO 27001. • Strategic thinker with the ability to self-start solutions, drive program growth, and enhance security maturity. • Strong communication skills with the ability to translate technical security concerns into business risks. • Ability to manage and optimize security controls while driving program improvements and operational execution. • Demonstrated ability to balance long-term security initiatives with day-to-day operational needs, supporting stakeholders across EDB.

🏖️ Benefits

• Access to CuraLinc for health and wellness tips and practices. • Wellness Fridays extending to December 2025! • Range of benefits and resources to promote a healthy work-life balance.