Back to jobs
New

Risk Manager

United States

Whether you’re an experienced professional or just getting started, your contributions matter at Fortra. If you’re passionate about tackling meaningful challenges alongside talented team members committed to helping each other succeed, all while having lots of fun, we want to hear from you. We offer competitive benefits and salaries, personal and professional development opportunities, flexibility, and much more! 

At Fortra, we’re breaking the attack chain. Ready to join us? 

Risk Manager will support the Director of Risk & Security by leading internal audit and risk management activities across the organization. This hands-on  role is far-reaching—spanning operational risk, IT and cybersecurity risk, third-party/vendor risk, compliance monitoring, policy governance, and business continuity planning. You will be responsible for overseeing end-to-end audit lifecycles, guiding enterprise risk assessments, driving remediation efforts, and influencing strategic decisions through high-impact reporting and advisory support. The ideal candidate combines technical risk fluency with people leadership, and thrives in a cross-functional, fast-paced environment where building trust and transparency is critical to success.

WHAT YOU'LL DO

Team Leadership & Oversight

  • Conduct and coordinate enterprise-wide risk assessments to identify and evaluate current and emerging risks.
  • Maintain and refine the organization’s risk register, control libraries, and mitigation plans.
  • Facilitate root cause analysis and corrective action planning for key risk incidents, control failures, or audit findings.

Enterprise Risk & Control Management

  • Conduct and coordinate enterprise-wide risk assessments to identify and evaluate current and emerging risks.
  • Maintain and refine the organization’s risk register, control libraries, and mitigation plans.
  • Facilitate root cause analysis and corrective action planning for key risk incidents, control failures, or audit findings.

Internal Audit Management

  • Oversee audit planning, fieldwork, and reporting for operational, IT, financial, and compliance audits.
  • Lead walkthroughs, process reviews, and control testing across business functions.
  • Validate the effectiveness of controls and ensure timely closure of audit findings.

Third-Party & Cybersecurity Risk

  • Collaborate with IT and procurement teams to assess and monitor third-party risk, including due diligence, contract risk review, and ongoing monitoring.
  • Support the cybersecurity team in aligning risk management with NIST, ISO, and other security frameworks.

Compliance & Policy Governance

  • Ensure adherence to internal policies, external regulations (e.g., SOX, GDPR, HIPAA), and industry standards.
  • Monitor compliance metrics and escalate issues requiring executive visibility.
  • Contribute to the development and maintenance of risk-related policies, procedures, and training.

Reporting & Stakeholder Engagement

  • Prepare risk dashboards, heat maps, and executive summaries for the Director of Risk & Security, senior leadership, and audit committees.
  • Serve as a key liaison for external auditors, regulators, and business unit leadership.
  • Communicate complex risk issues in a clear, compelling manner to both technical and non-technical stakeholders.

Cross-Functional Collaboration

  • Work closely with IT, Legal, Product, and other departments to assess operational, cybersecurity, and third-party risks.
  • Promote a culture of risk awareness and continuous improvement throughout the organization.

QUALIFICATIONS

  • Bachelor’s degree in Risk Management, Business, Accounting, Information Security, or related field.
  • 5+ years of relevant experience in risk management, internal audit, or compliance.
  • 2+ years in a people leadership role.
  • Professional certifications such as CRMA, CISA, CIA, or equivalent preferred.
  • Strong knowledge of risk frameworks (e.g., COSO, ISO 31000, NIST).
  • Work experience and/or background in technology based roles or industry
  • Excellent communication, analytical, and stakeholder engagement skills.
  • Ability to manage multiple priorities in a dynamic, fast-paced environment.

PREFERRED SKILLS

  • Familiarity with GRC platforms (e.g., Hyperproof, Archer, ServiceNow GRC, MetricStream).
  • Experience working in regulated industries (e.g., SaaS, healthcare, financial services).
  • Working knowledge of cybersecurity, data privacy, or third-party risk management.

3408

At Fortra, our compensation philosophy prioritizes fair market value and internal equity, aligning with your experience and specialized skill set.  

As a full-time, exempt employee at Fortra, you’ll enjoy a comprehensive benefits package that includes:  

  • Health, dental, and vision coverage as of hire 
  • Immediate enrollment in 401(k), HSA, and FSA plans 
  • Flexible PTO policy  
  • Tuition and personal enrichment reimbursement 
  • Option to enroll in ID Theft Protection Program   

Check out some of the of the other benefits we offer that are focused on your holistic well-being and our Diversity, Equity, and Inclusion program. 
 

Compensation

$135,000 - $165,000 USD

Visit our website to learn more about why employees choose to work for Fortra. Remember to connect with us on LinkedIn.

As an EEO/Affirmative Action Employer, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, veteran or disability status.

Create a Job Alert

Interested in building your career at Fortra? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...
Select...

For purposes of this question " sponsorship to work in the United States' means "an H-IB visa petition, an 0-1 visa petition, a CPT visa petition, an E-3 visa petition, TN status and 'job flexibility benefits' (also known as 1-140 portability or Adjustment of Status portability) for long-delayed adjustment of status applications that have been pending for 180 days or longer." (Please ask us if you are uncertain whether you may need immigration sponsorship or desire clarification.)

Select...

Our complete Privacy Policy can be found here. 

Please list a range (numeric values only)

U.S. Standard Demographic Questions

We invite applicants to share their demographic background. If you choose to complete this survey, your responses may be used to identify areas of improvement in our hiring process.
Select...
Select...
Select...
Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Fortra’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.