Director of Information Risk Management (IRM) Remote

Director of Information Risk Management (IRM)

Company: VerSprite
Location: Remote
Position Type: Full-time

About VerSprite

VerSprite is a global leader in cybersecurity and risk management, empowering organizations to achieve a resilient security posture. We specialize in providing innovative solutions that protect data, infrastructure, and operations, ensuring our clients can thrive in a digital-first world.

We are seeking a Director of Information Risk Management (IRM) to lead and enhance our IRM services, working with a diverse range of industries to identify, assess, and mitigate risks while aligning information security initiatives with business objectives.

Key Responsibilities

Leadership & Strategy:

• Develop and lead the IRM program to deliver comprehensive risk management services tailored to client needs.
• Collaborate with executive leadership to define the strategic direction of the IRM practice.
• Drive the adoption of risk-based approaches across client organizations, aligning security initiatives with business objectives.

Risk Assessment & Management:

• Oversee the identification, assessment, and prioritization of information security risks.
• Develop risk mitigation strategies, including policies, processes, and controls, ensuring compliance with frameworks such as ISO 27001, NIST, or SOC 2.
• Advise clients on third-party risk management, business continuity planning, and incident response readiness.

Client Engagement & Relationship Management:

• Act as the primary point of contact for client engagements, ensuring exceptional service delivery.
• Conduct executive-level presentations to communicate risk findings, recommendations, and remediation plans.
• Build and nurture long-term client relationships, identifying opportunities for additional service offerings.

Team Management:

• Recruit, mentor, and lead a team of IRM professionals, fostering a culture of excellence and continuous improvement.
• Provide guidance on complex projects, ensuring deliverables meet or exceed client expectations.

Technical Expertise & Research:

• Stay abreast of emerging risks, threats, and technologies in the cybersecurity landscape.
• Contribute to thought leadership initiatives, including whitepapers, webinars, and industry events.

Qualifications

Required:

• Bachelor’s degree in Information Security, Risk Management, or a related field (Master’s preferred).
• 10+ years of experience in information risk management, including leadership roles.
• Strong knowledge of industry standards and frameworks (ISO 27001, NIST, SOC 2, PCI DSS, etc.).
• Expertise in conducting risk assessments, gap analyses, and compliance audits.
• Experience advising on GRC tools, risk management platforms, or related technologies.
• Exceptional communication skills, with the ability to articulate complex risks to non-technical audiences.

Preferred:

• Relevant certifications (CISSP, CISM, CRISC, or similar).
• Proven experience in consulting or professional services environments.
• Familiarity with cloud security, third-party risk management, and incident response.

Why Join VerSprite?

• Work with a global team of cybersecurity experts.
• Opportunity to influence the strategic direction of our IRM practice.
• Access to cutting-edge tools, research, and methodologies.
• Competitive compensation and benefits package.

If you are a visionary leader passionate about advancing information risk management, we invite you to apply and make a meaningful impact with VerSprite.