ZipRecruiter

Log In

1

Manager Enterprise Risk Management Jobs in Oregon

PeaceHealth

Clinical Risk Manager Sr

Springfield, OR

$50.89 - $76.33/hr

... leading enterprise-wide initiatives to enhance patient safety and reduce liability. In addition ... Develops and communicates with senior management on appropriate responses to risk events and ...

Five9

OR

Enterprise Risk Management Partner: * Partner with Enterprise Risk Management manager and leadership to enhance the company's risk assessment framework. * Collaborate to identify emerging risks ...

Fortinet

Named Account Manager, Enterprise

Portland, OR · Remote

The Named Account Manager, Enterprise is required to spend more than 50% of their time outside of their office or home office engaged in selling, including travel as needed to make a sale. * Must be ...

Parsons

OR · Hybrid

Collaborate with the Risk Management team on the annual renewal of Parsons' corporate insurance programs (e.g., general liability, professional liability, international, property, auto, workers ...

Azure Standard

Director of Legal & Risk Management

OR · On-site

We are seeking a Director of Legal & Risk Management to serve as a strategic advisor and steward of legal integrity across the enterprise. This role exists to protect Azure's people, relationships ...

Concora Credit Inc.

Manager, Risk

Beaverton, OR

Develop and implement risk management policies and procedures. * Partner with risk leadership and IT to drive improvements across the organization. * Work closely with the Data Science team to refine ...

next page

Showing results 1-20

All JobsEnterprise Risk Management JobsManager Enterprise Risk Management JobsManager Enterprise Risk Management Jobs in Oregon

Manager Enterprise Risk Management information

What is the difference between Manager Enterprise Risk Management vs Risk Analyst?

AspectManager Enterprise Risk ManagementRisk Analyst
CertificationsFRM, CRM, CPAFRM, CRM, CPA
Work EnvironmentStrategic, leadership-focused, cross-departmentalAnalytical, data-driven, focused on risk assessment
Employer & Industry UsageFinancial institutions, corporations, insuranceFinancial services, consulting, insurance

The Manager Enterprise Risk Management oversees risk strategies, policy development, and cross-functional risk mitigation. In contrast, the Risk Analyst primarily conducts data analysis, risk assessments, and supports risk management initiatives. Both roles often require similar certifications and are found in similar industries, but the Manager has a broader strategic focus while the Risk Analyst emphasizes data and analysis.

What are the key skills and qualifications needed to thrive as a Manager Enterprise Risk Management, and why are they important?

To thrive as a Manager Enterprise Risk Management, you need expertise in risk assessment, regulatory compliance, financial analysis, and typically a degree in finance, business, or a related field. Familiarity with risk management frameworks (such as COSO or ISO 31000), governance, and tools like risk management software and data analytics platforms is essential. Strong analytical thinking, leadership, and communication skills help in effectively identifying risks and collaborating with diverse stakeholders. These skills are crucial for proactively managing organizational risks, ensuring compliance, and supporting strategic decision-making.

What are the 4 types of managers?

Managers can be classified into four main types: top-level managers who set strategic goals, middle managers who implement policies and oversee departments, first-line managers who supervise daily operations, and functional managers responsible for specific areas like finance or HR. Each type requires different skills and focuses on different organizational levels to ensure effective management and goal achievement.

What is the role of a manager?

A manager is responsible for planning, organizing, and overseeing team activities to achieve organizational goals. In an enterprise risk management context, they identify potential risks, develop mitigation strategies, and ensure compliance with policies and regulations. Strong leadership, communication skills, and knowledge of risk assessment tools are essential for this role.

How does a Manager of Enterprise Risk Management typically collaborate with other departments to identify and mitigate risks?

A Manager of Enterprise Risk Management works closely with various departments—such as finance, operations, compliance, and IT—to proactively identify, assess, and prioritize organizational risks. This collaboration often involves leading cross-functional risk workshops, facilitating open communication channels, and developing risk mitigation strategies that align with business objectives. Regular meetings and reporting help ensure that all stakeholders are informed and engaged in risk management initiatives, fostering a risk-aware culture throughout the organization.

What does a Manager of Enterprise Risk Management do?

A Manager of Enterprise Risk Management is responsible for identifying, assessing, and mitigating risks that could affect a company's operations, reputation, or financial performance. They develop risk management strategies, policies, and processes to ensure that potential threats are properly managed and controlled. Their work often involves collaborating with other departments to promote a risk-aware culture and ensure regulatory compliance. Additionally, they may oversee risk assessments, prepare reports for senior leadership, and implement risk mitigation plans.

What do you mean by manager?

A manager is a professional responsible for overseeing a team or department, setting goals, and ensuring tasks are completed efficiently. In the context of an Enterprise Risk Management role, a manager typically leads risk assessment processes, develops strategies to mitigate risks, and collaborates with other departments to ensure organizational safety and compliance. Strong leadership, communication skills, and knowledge of risk management tools are essential for this position.

What is another word for manager or leader?

In the context of a Manager Enterprise Risk Management role, alternative words for manager or leader include supervisor, director, coordinator, or head. These terms reflect positions of responsibility and oversight within an organization, often requiring leadership skills and risk management expertise.
What are the most commonly searched types of Enterprise Risk Management jobs in Oregon? The most popular types of Enterprise Risk Management jobs in Oregon are:
What are popular job titles related to Manager Enterprise Risk Management jobs in Oregon? For Manager Enterprise Risk Management jobs in Oregon, the most frequently searched job titles are:
What job categories do people searching Manager Enterprise Risk Management jobs in Oregon look for? The top searched job categories for Manager Enterprise Risk Management jobs in Oregon are:
What cities in Oregon are hiring for Manager Enterprise Risk Management jobs? Cities in Oregon with the most Manager Enterprise Risk Management job openings:
Manager Enterprise Risk Management jobs near you
Senior Manager, Enterprise Security

Senior Manager, Enterprise Security

Relativity

Portland, OR • Hybrid

Other

Posted 7 days ago

Job description

Posting Type

Hybrid/Remote

Job Overview

The Senior Manager of Enterprise Security is a technical people leader responsible for developing, implementing, operating, and continuously optimizing a multi-layered security ecosystem across corporate, cloud, and product environments. This role drives a defense-in-depth strategy, embeds security into AI-augmented SecDevOps and continuous compliance programs, and leads a living, learning, and adaptive security function that evolves with the threat, regulatory, and business landscape. In partnership with Engineering, IT, Legal, and Governance, Risk, and Compliance, this leader translates security strategy into measurable outcomes that scale with the business.

Job Description and Requirements

Defense in Depth & Security Operations

  • Architect and own thetactical execution ofenterprise defense-in-depthstrategy aligned with security strategic intent: define layered controls across network, endpoints, identity, cloud workloads, and data,witheffective layeredcontrols at every tier and coverage mapped torelevant frameworks.

  • Design and operate an integrated detection stack (EDR, NDR, CDR, SIEM/SOAR) with AI-enabledUEBA, ML-based alert prioritization, and automated enrichment to reduce MTTD and MTTRand increase defense in depth efficacy.

  • EnforceadaptiveZero Trust principles (ZTNA, least-privilege micro-segmentation, phishing-resistant MFA/FIDO2, JIT access) and SASE/SSE architecture across all access paths.

  • Ensure configuration and implementation of hardeningstandards using CIS Benchmarks/DISA STIGs with automated compliance validation, and maintain IR playbooks covering ransomware, supply chain compromise, cloud account takeover, and AI/ML model poisoning.

AIDevSecOps & Secure Development

  • Build and operate an AI-augmentedDevSecOps program: embed SAST, DAST, SCA, secret scanning, IaC analysis, and container image securityinto CI/CD pipelines with AI-generated fix recommendations surfaced in PR workflows.

  • Deploy AI-assisted threat modeling, exposure analysis and exploit validation methodsand establishgenerative and agentic AI security &governancemethodologies.

  • Run a security champions program embedding technical advocates in engineering teams to own secure coding standards, security debt backlog management, and threat model participation.

Cloud, Vulnerability & Threat Intelligence

  • Lead, implement and optimize cloud securityprograms across multi-cloud environments with automated drift detection, policy-as-code enforcement, and runtime workload protection.

  • Run a risk-basedexposuremanagement programwiththreat intelligencecontext to prioritize remediation SLAs; operate continuous ASM.

  • Integrate threat intelligence (OSINT, commercial feeds, ISAC) intopurple teaming efforts andconduct or overseepurple team engagements mapped toevolving threat landscape.

Governance, Strategy & Collaboration

  • Define and track security KPIs grounded in technical outcomes: patch SLA compliance, control coverage heat maps, mean dwell time, lateral movement detection rates, and pipeline gate trends.

  • Work with the information security GRC function to adapt and evolvesecurity policies, technical standards, and control baselines aligned toSOX,SOC 2, ISO 27001, HIPAA, GDPR, and CCPA;to hedge risk associated with evolving regulatory landscape.

  • Partner with Compliance and Legal on audits, certifications, e-discovery, and forensic integrity requirements; translate technical risk into quantitative business impact using frameworks such as FAIR.

  • Serve as a trusted technical advisor to executives and architects; embed security into technology roadmaps, M&A due diligence, and vendor risk assessments.

People Management Responsibilities

  • Builds, coaches, and retains a high-performing, technically elite security team. Creates an environment of psychological safety, accountability, and engineering excellence with clear career paths spanning technical specialization and leadership. Drives structured performance management, proactive talent development, and inclusive leadership practices to keep the team motivated and equipped to deliver exceptional outcomes.

Minimum Qualifications:

  • Bachelor's degree in Computer Science, Information Security,a related field,orequivalent hands-on experience considered.

  • 10+ years in enterprise or product security with 4+ years in a senior technical leadership role owning multi-domain programs.

  • Hands-on technical depth:network security, detection engineering, incident response, endpoint management, custom scripting and telemetry engineering

  • Proven defense-in-depth/ layered defensedesign experience: evaluating and improving layered control effectiveness across network, endpoint, identity, cloud, and application domains.

  • Practical experience with AI-augmented security: ML-based detection, SOAR automation, or AI-integrated DevSecOps pipelines.

  • Mastery of NIST CSF, MITRE ATT&CK, CIS Controls, Zero Trust (NIST SP 800-207), and cloud security frameworks (AWS, Azure, or GCP).

  • Demonstrated ability to communicate technical security risk and architectural trade-offs to both technical peers and executive audiences.

  • Hybrid (2+ days in office) or remote based on company policy.

Preferred Qualifications:

  • Experience securing SaaS, cloud-native, or globally distributed regulated environments.

  • Familiarity with legal technology, e-discovery, litigation holds, and digital forensics chain-of-custody requirements.

  • Experience with LLM/AI security: prompt injection, model poisoning, AI output validation, and governance for AI-assisted code generation.

  • Scripting and automation skills (Python, Bash, PowerShell) applied to detection engineering, tooling integration, or compliance automation.

  • Certifications such as CISSP, CISM, OSCP, GCIH, GCFA, CCSP, or AWS Security Specialty.

Relativity is committed to competitive, fair, and equitable compensation practices.

This position is eligible for total compensation which includes a competitive base salary, an annual performance bonus, and long-term incentives.

The expected salary range for this role is between following values:

$185,000 and $277,000

The final offered salary will be based on several factors, including but not limited to the candidate's depth of experience, skill set, qualifications, and internal pay equity. Hiring at the top end of the range would not be typical, to allow for future meaningful salary growth in this position.

Required Skills:

Access Management, Defense in Depth, Network Security, Project Management, Risk Management, Security Architecture Design, Security Audit, Security Awareness, Security Engineering, Security Operations, Vulnerability Management

Apply