Manager of Cyber Risk Assurance

• This role does not offer visa sponsorship. Candidates must be authorized to work in the U.S. without current or future sponsorship (including CPT, OPT, TN, or H-1B).

The Manager of Cyber Risk Assurance owns the definition, execution, and continuous evolution of Delta Dental of California''s cyber risk assurance capabilities. This role is critical to advancing cyber assurance into a future state defined by measurable capability outcomes, automation, AI augmentation, and timely, evidence-based insight. The manager will lead the team responsible for determining whether cyber risk management capabilities are appropriately designed, implemented, and operating effectively.

This leader pursues measurable assurance outcomes across people, processes, and technology. The role collaborates closely with cyber risk capability owners, Technology, Internal Audit, external auditors, Third-Party Risk Management, Risk and Compliance, Legal, and Privacy to support regulatory readiness, audits, examinations, and informed risk decisions.

This individual will lead a multidisciplinary team responsible for Risk Control Monitoring and Validation (RCMV), the Unified Requirements Framework (URF), effectiveness testing, evidence management, issue oversight, audit support, and agentic and deterministic assurance automation.

Behind the smile! We are dedicated to safeguarding the health and financial stability of our employees and their loved ones. This commitment extends beyond the workplace to foster personal growth and holistic wellbeing. Our life-changing rewards package includes:

• Competitive base and incentive pay
• 401(k) with robust matching and non-matching contributions
• Rich medical & pharmacy benefits
• 100% employer-paid dental and vision benefits
• Holistic wellbeing program with deep financial incentives
• Generous paid time off plus 12 paid holidays and your birthday off
• Culture of growth and learning: career development; tuition reimbursement; recognition program
• Family support: adoption assistance, fertility treatment, child, elder & pet care assistance
• Social responsibility and volunteer opportunities
• Employee discount program

Fair Chance Ordinances and Criminal Background Considerations

This position requires that the applicant undergo a background check. Qualified applicants with arrest or conviction records will be considered for employment in accordance with any applicable federal, state or local laws, including, but not limited to, the California Fair Chance Act, the Los Angeles County Fair Chance Ordinance, the City of Los Angeles Fair Chance Initiative for Hiring Ordinance, the San Francisco Fair Chance Ordinance, and/or New York Corrections Law Article 23-A.

Important Work Authorization Information

Please note, Delta Dental will not sponsor applicants for work visas for this position.

#LI-Remote

Minimum Qualifications

• Bachelor's degree and 8+ years of professional experience in cybersecurity, cyber risk management, technology risk, IT audit, regulatory compliance, or controls assurance, including at least 2+ years in leadership roles; or equivalent experience in lieu of education.

Required Knowledge, Skills, and Abilities

• Strong expertise in cyber risk assurance disciplines, including control design and effectiveness, evidence evaluation, testing methodology, regulatory analysis, and issue management.

• Deep understanding of cybersecurity frameworks and requirements such as NIST, HIPAA Security Rule, NYDFS Cybersecurity Regulation, PCI DSS, and ISO/IEC 27001.

• Experience applying automation, analytics, continuous control monitoring, or AI/ML to risk, compliance, audit, or assurance processes.

• Demonstrated ability to:

• Lead large-scale assurance, risk, compliance, or audit capabilities.

• Build and manage high-performing multidisciplinary teams.

• Align assurance activities with business risk and executive decision needs.

• Drive continuous improvement using metrics, evidence, and performance insights.

• Manage multiple concurrent assurance activities with a highly organized, detail-oriented, and execution-focused approach, particularly where accuracy, completeness, and regulatory deadlines are critical.

• Strong communication and stakeholder management skills across all levels of the organization.

Base Pay Information

The national base pay range at the end is a good-faith estimate of what Delta Dental may pay for new hires. Actual pay may vary based on Delta Dental's assessment of the candidate's knowledge, skills, abilities (KSAs), related experience, education, certifications and ability to meet required minimum job qualifications. Other factors impacting pay include prevailing wages in the work location and internal equity.

Pay Grade 25. $142,077 - $307,899

• Own and execute the cyber risk assurance strategy, driving transformation toward highly automated, AI-augmented, and increasingly continuous assurance.
• Translate strategic objectives, emerging risks, and regulatory obligations into actionable RCMV and URF roadmaps aligned with enterprise cyber risk management goals.
• Maintain the Unified Requirements Framework by harmonizing applicable regulatory, contractual, standards-based, and internal requirements into measurable capability outcomes.
• Develop and maintain a risk-based effectiveness testing framework, including evidence expectations, test procedures, metrics, thresholds, and approved pass/fail logic.
• Assess cyber risk management capabilities for effectiveness; document material gaps as formal issues and ensure appropriate ownership, escalation, remediation, and validation.
• Centralize and maintain authoritative evidence supporting assurance conclusions, internal and external audits, regulatory examinations, and attestations.
• Champion the adoption of automation, analytics, machine learning, and AI to improve evidence collection, control testing, coverage, frequency, consistency, and reporting.
• Lead the evolution of assurance toward scalable, objective, and AI-enabled assessment methods, defining how assurance objectives and evaluation criteria can be translated into repeatable automated processes.
• Partner with capability owners and assurance stakeholders to evaluate regulatory change, extend assurance to new technologies and risk domains, and resolve identified gaps.
• Manage multiple concurrent cyber assurance, audit, and regulatory activities, ensuring deliverables remain on track and critical compliance deadlines are met.
• Define and track key performance metrics that demonstrate assurance coverage, currency, effectiveness, issue remediation, automation adoption, and business value.
• Own and execute the cyber risk assurance strategy, driving transformation toward highly automated, AI-augmented, and increasingly continuous assurance.
• Translate strategic objectives, emerging risks, and regulatory obligations into actionable RCMV and URF roadmaps aligned with enterprise cyber risk management goals.
• Maintain the Unified Requirements Framework by harmonizing applicable regulatory, contractual, standards-based, and internal requirements into measurable capability outcomes.
• Develop and maintain a risk-based effectiveness testing framework, including evidence expectations, test procedures, metrics, thresholds, and approved pass/fail logic.
• Assess cyber risk management capabilities for effectiveness; document material gaps as formal issues and ensure appropriate ownership, escalation, remediation, and validation.
• Centralize and maintain authoritative evidence supporting assurance conclusions, internal and external audits, regulatory examinations, and attestations.
• Champion the adoption of automation, analytics, machine learning, and AI to improve evidence collection, control testing, coverage, frequency, consistency, and reporting.
• Lead the evolution of assurance toward scalable, objective, and AI-enabled assessment methods, defining how assurance objectives and evaluation criteria can be translated into repeatable automated processes.
• Partner with capability owners and assurance stakeholders to evaluate regulatory change, extend assurance to new technologies and risk domains, and resolve identified gaps.
• Manage multiple concurrent cyber assurance, audit, and regulatory activities, ensuring deliverables remain on track and critical compliance deadlines are met.
• Define and track key performance metrics that demonstrate assurance coverage, currency, effectiveness, issue remediation, automation adoption, and business value.