Director Of Risk Management Jobs
Director Of Risk Management jobs are open across financial services, healthcare, insurance, energy, and manufacturing, from senior manager to C-suite level, with specializations in enterprise risk, operational risk, and regulatory compliance. Find a role that fits from the openings below and apply directly.
Find JobsOverview
Showing 5 of 214+ Director Of Risk Management jobs
INTRODUCTION
Do you want to join an organization that invests in you as a Director of Information Protection Security and Risk? At HCA, you come first. HCA Healthcare has committed up to $300 million in programs to support our incredible team members over the course of three years.
Benefits
At HCA, we want to ensure your needs are met. We offer eligible colleagues an attractive benefit package that includes medical, wellbeing, dental and vision benefits along with some unique benefits including:
- Medical, Dental, Vision, Life Insurance and Flexible Spending
- Paid Time Off (PTO) and Personal Leave
- 401K (100% annual match - 3% to 9% of pay based on years of service)
- Academic Assistance and Reimbursements for Tuition and Student Loans
- Employee Discounts including Tickets, Retail, Mental Health Apps, Education Apps, Identity Theft Protection etc.
- Home, Auto, and Pet Insurance
- Employee Stock Purchase Program (ESPP)
- Short Term & Long Term Disability coverage
- Adoption Assistance
- Legal Benefits and lots more!
Learn more about Employee Benefits
You contribute to our success. Every role has an impact on our patients’ lives and you have the opportunity to make a difference. We are looking for a dedicated Director of Information Protection Security and Risk like you to be a part of our team.
JOB SUMMARY AND QUALIFICATIONS
The Director of Information Protection & Security (IPS) Risk Management leads the risk management function for IPS. In this critical leadership position, you will be responsible for developing and overseeing our organization's comprehensive cybersecurity risk management program. This role will be responsible for developing and implementing a robust cybersecurity risk management strategy aligned with industry best practices and evolving threats. To be successful in this role, the Director of Risk Management must be able to clearly communicate cyber risks to all levels of the organization.
This leader will be key in implementing a risk management program that results in the identification, prioritization, and reduction of cybersecurity and ensures compliance for all in-scope facilities. This trusted advisor will help raise the protection bar by building strong relationships with technical and non-technical stakeholders to make risk visible, facilitate well-informed decision, and drive accountability. The ability to clearly communicate and report cybersecurity risk, and manage organizational relationships, will be key to the success of this role. In addition, this role must be able to establish a outcome-driven metrics approach to risk management and utilize protection level agreements as a mechanism to establish risk thresholds.
This position is expected to promote a culture that supports operating with an acceptable level of risk, developing standardized risk management criteria including but not limited to threats, vulnerabilities, likelihood, impact, and maturity, establishing risk tolerance, planning risk analysis (e.g. Meaningful Use Security Risk Analyses, HIPAA), and managing risk assessment activities (e.g. HIPAA, PCI, NIST Cyber Security Framework). In addition, this position will ensure all parts of the risk management program are documented. It will also ensure a strategy for using and maintaining the risk register to prioritize risk reduction actions and activities is implemented. This position is also responsible for evolving the organization’s current risk treatment framework. This position is also responsible for collaborating with Information Security on the development, configuration, and implementation of the Risk Management Archer GRC application.
This position requires a candidate who can, with minimal guidance, analyze business requirements and processes, understand colleague behaviors, facilitate and lead meetings with key stakeholders within the organization, provide industry expertise and knowledge in the identification and mitigation of organizational risk, and enable decision making to support the adherence to industry standards and federal regulations.
The Director of IPS Risk Management provides guidance, direction, and mentorship to staff members to support the overall team goals and deliverables. A qualified candidate must be a highly motivated self-starter and be committed to delivering quality outcomes that meet team and organizational goals.
What you will do in this role:
Quality
- Work as part of the IPS department’s leadership team to develop company requirements, strategies, priorities, processes, implementation plans, and assurance necessary to protect the company against information protection and security risks that could impact patients, employees, and the financial success of the business
- Remain knowledgeable of legislative, regulatory, contractual, and other compliance requirements (e.g. HIPAA, PCI, SOX, Joint Commission) as well as departmental policies, standards, and procedures and participating in revision processes
- Develop and lead the strategy to mature the risk management roadmap, create new roadmaps where needed, and ensure all roadmaps align with business objectives for the key focus areas
- Provide periodic analysis of Company IPS-related risk position, based on analysis of current controls status and current threat landscapes
- Monitor developments in related industries and communicate on the potential impact on or applicability to the organization
- Ensure metrics are identified within risk management and remediation strategy that help demonstrate risk reduction and report progress to IPS leadership and company executive leadership
- Develop risk register and be aware of associated remediation plans to respond to previously unidentified or inadequately addressed risk areas
- Build rapport, credibility, and cohesion across IPS and other stakeholders across the enterprise
- Partner with Internal Audit and IPS Leadership to ensure periodic reviews of the risk management program are performed to obtain independent assessments of the program’s effectiveness
- Partner with key stakeholders (e.g. Security Architects, DISAs) within IPS as well as with Internal Audit, Enterprise Risk Management, Legal, and ITG to ensure appropriate oversight and governance of the program
- Ensure the team is involving all relevant stakeholders in major decisions; recognizing multiple agendas and making/communicating final decisions in ways that foster maximum ownership and minimum resistance
Service
- Lead the team in providing risk-based security perspective through consulting and collaboration
- Lead the team in facilitating and guiding business decisions and solutions
People
- Accountable for the successful completion of organizational objectives through team members
- Establish mutual objectives and targets for team members
- Mentor team members, including developing and monitoring their personal development plans, and provide feedback via the annual performance review process
- Promote a culture of collaboration, work/life balance, and open communication
- Encourage new ways of thinking and problem solving
- Create a team environment where members embrace change and adopt new practices
- Stay engaged with team members through 1:1s, rounding, and performance review activities
Growth
- Monitor developments in related industries and communicate on the potential impact on or applicability to the organization
- Build rapport, credibility, and cohesion within IPS and with other stakeholders across the enterprise
- Participate in educational opportunities to build and maintain team knowledge of evolving risk, information security, and privacy concepts
Finance
- Responsible for ensuring proposed future work efforts/projects are appropriately captured with labor and spend estimates and submitted for leadership prioritization and funding
What qualifications you will need:
- Bachelor’s degree required
- Master’s degree preferred
- 3+ year(s) of leadership experience
- 7+ years of experience in information technology, information security, privacy, and/or healthcare
- CISSP preferred
- CISA preferred
- CRISC preferred
HCA Healthcare has been recognized as one of the World’s Most Ethical Companies® by the Ethisphere Institute more than ten times. In recent years, HCA Healthcare spent an estimated $3.7 billion in cost for the delivery of charitable care, uninsured discounts, and other uncompensated expenses.
"Good people beget good people." - Dr. Thomas Frist, Sr.
HCA Healthcare Co-Founder
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
INTRODUCTION
Do you want to join an organization that invests in you as a Director of Information Protection Security and Risk? At HCA, you come first. HCA Healthcare has committed up to $300 million in programs to support our incredible team members over the course of three years.
Benefits
At HCA, we want to ensure your needs are met. We offer eligible colleagues an attractive benefit package that includes medical, wellbeing, dental and vision benefits along with some unique benefits including:
- Medical, Dental, Vision, Life Insurance and Flexible Spending
- Paid Time Off (PTO) and Personal Leave
- 401K (100% annual match - 3% to 9% of pay based on years of service)
- Academic Assistance and Reimbursements for Tuition and Student Loans
- Employee Discounts including Tickets, Retail, Mental Health Apps, Education Apps, Identity Theft Protection etc.
- Home, Auto, and Pet Insurance
- Employee Stock Purchase Program (ESPP)
- Short Term & Long Term Disability coverage
- Adoption Assistance
- Legal Benefits and lots more!
Learn more about Employee Benefits
You contribute to our success. Every role has an impact on our patients’ lives and you have the opportunity to make a difference. We are looking for a dedicated Director of Information Protection Security and Risk like you to be a part of our team.
JOB SUMMARY AND QUALIFICATIONS
The Director of Information Protection & Security (IPS) Risk Management leads the risk management function for IPS. In this critical leadership position, you will be responsible for developing and overseeing our organization's comprehensive cybersecurity risk management program. This role will be responsible for developing and implementing a robust cybersecurity risk management strategy aligned with industry best practices and evolving threats. To be successful in this role, the Director of Risk Management must be able to clearly communicate cyber risks to all levels of the organization.
This leader will be key in implementing a risk management program that results in the identification, prioritization, and reduction of cybersecurity and ensures compliance for all in-scope facilities. This trusted advisor will help raise the protection bar by building strong relationships with technical and non-technical stakeholders to make risk visible, facilitate well-informed decision, and drive accountability. The ability to clearly communicate and report cybersecurity risk, and manage organizational relationships, will be key to the success of this role. In addition, this role must be able to establish a outcome-driven metrics approach to risk management and utilize protection level agreements as a mechanism to establish risk thresholds.
This position is expected to promote a culture that supports operating with an acceptable level of risk, developing standardized risk management criteria including but not limited to threats, vulnerabilities, likelihood, impact, and maturity, establishing risk tolerance, planning risk analysis (e.g. Meaningful Use Security Risk Analyses, HIPAA), and managing risk assessment activities (e.g. HIPAA, PCI, NIST Cyber Security Framework). In addition, this position will ensure all parts of the risk management program are documented. It will also ensure a strategy for using and maintaining the risk register to prioritize risk reduction actions and activities is implemented. This position is also responsible for evolving the organization’s current risk treatment framework. This position is also responsible for collaborating with Information Security on the development, configuration, and implementation of the Risk Management Archer GRC application.
This position requires a candidate who can, with minimal guidance, analyze business requirements and processes, understand colleague behaviors, facilitate and lead meetings with key stakeholders within the organization, provide industry expertise and knowledge in the identification and mitigation of organizational risk, and enable decision making to support the adherence to industry standards and federal regulations.
The Director of IPS Risk Management provides guidance, direction, and mentorship to staff members to support the overall team goals and deliverables. A qualified candidate must be a highly motivated self-starter and be committed to delivering quality outcomes that meet team and organizational goals.
What you will do in this role:
Quality
- Work as part of the IPS department’s leadership team to develop company requirements, strategies, priorities, processes, implementation plans, and assurance necessary to protect the company against information protection and security risks that could impact patients, employees, and the financial success of the business
- Remain knowledgeable of legislative, regulatory, contractual, and other compliance requirements (e.g. HIPAA, PCI, SOX, Joint Commission) as well as departmental policies, standards, and procedures and participating in revision processes
- Develop and lead the strategy to mature the risk management roadmap, create new roadmaps where needed, and ensure all roadmaps align with business objectives for the key focus areas
- Provide periodic analysis of Company IPS-related risk position, based on analysis of current controls status and current threat landscapes
- Monitor developments in related industries and communicate on the potential impact on or applicability to the organization
- Ensure metrics are identified within risk management and remediation strategy that help demonstrate risk reduction and report progress to IPS leadership and company executive leadership
- Develop risk register and be aware of associated remediation plans to respond to previously unidentified or inadequately addressed risk areas
- Build rapport, credibility, and cohesion across IPS and other stakeholders across the enterprise
- Partner with Internal Audit and IPS Leadership to ensure periodic reviews of the risk management program are performed to obtain independent assessments of the program’s effectiveness
- Partner with key stakeholders (e.g. Security Architects, DISAs) within IPS as well as with Internal Audit, Enterprise Risk Management, Legal, and ITG to ensure appropriate oversight and governance of the program
- Ensure the team is involving all relevant stakeholders in major decisions; recognizing multiple agendas and making/communicating final decisions in ways that foster maximum ownership and minimum resistance
Service
- Lead the team in providing risk-based security perspective through consulting and collaboration
- Lead the team in facilitating and guiding business decisions and solutions
People
- Accountable for the successful completion of organizational objectives through team members
- Establish mutual objectives and targets for team members
- Mentor team members, including developing and monitoring their personal development plans, and provide feedback via the annual performance review process
- Promote a culture of collaboration, work/life balance, and open communication
- Encourage new ways of thinking and problem solving
- Create a team environment where members embrace change and adopt new practices
- Stay engaged with team members through 1:1s, rounding, and performance review activities
Growth
- Monitor developments in related industries and communicate on the potential impact on or applicability to the organization
- Build rapport, credibility, and cohesion within IPS and with other stakeholders across the enterprise
- Participate in educational opportunities to build and maintain team knowledge of evolving risk, information security, and privacy concepts
Finance
- Responsible for ensuring proposed future work efforts/projects are appropriately captured with labor and spend estimates and submitted for leadership prioritization and funding
What qualifications you will need:
- Bachelor’s degree required
- Master’s degree preferred
- 3+ year(s) of leadership experience
- 7+ years of experience in information technology, information security, privacy, and/or healthcare
- CISSP preferred
- CISA preferred
- CRISC preferred
HCA Healthcare has been recognized as one of the World’s Most Ethical Companies® by the Ethisphere Institute more than ten times. In recent years, HCA Healthcare spent an estimated $3.7 billion in cost for the delivery of charitable care, uninsured discounts, and other uncompensated expenses.
"Good people beget good people." - Dr. Thomas Frist, Sr.
HCA Healthcare Co-Founder
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
See All 214+ Director Of Risk Management Jobs
Jump back to the full list of openings and apply to any director of risk management role that fits.
Find JobsDirector Of Risk Management Job Market
A snapshot from current openings nationwide, updated as new roles post.
Who's Hiring
- FirstService Residential8
- Apptronik3
- Kirkland & Ellis3
- University Of Washington3
- University of Miami3
Top Industries Hiring
- Education34
- Healthcare & Medical Services30
- Banking & Financial Services24
- Technology & Software19
- Consulting & Professional Services15
What Employers Look For
The qualifications that appear most often in director of risk management jobs.
- Bachelor's or master's degree in finance, business administration, or a related field
- 7 to 10 years of progressive risk management experience, including leadership responsibility
- Certified Risk Management Professional (CRMP), FRM, or CRISC certification preferred
- Deep knowledge of enterprise risk management frameworks such as COSO ERM or ISO 31000
- Experience designing and implementing risk governance structures and reporting to executive leadership
- Proficiency with GRC platforms such as Archer, ServiceNow, or MetricStream
Tips for Your Director Of Risk Management Job Search
Quantify risk exposure you managed
Hiring managers want to see the scale of risk frameworks you owned. Replace vague statements with specifics: the portfolio size, the number of entities covered, or the regulatory frameworks you implemented. Directors who quantify exposure stand out from candidates who only describe processes.
Tailor your resume to the industry vertical
Risk management language varies sharply between banking, healthcare, and energy. A resume built around Basel III and credit risk reads poorly to a hospital system hiring for patient safety and HIPAA compliance. Adjust your terminology and example types to match each sector before you apply.
Target openings by regulatory environment
Filter your search by industry and then check the job description for the regulatory bodies mentioned, such as OCC, SEC, COSO, or ISO 31000. Your strongest applications will be to roles where your regulatory experience overlaps directly with what the employer is currently navigating.
Apply early to roles that fit
Migrate Mate lists director of risk management openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Prepare a case study for interviews
Panel interviews for director of risk management roles almost always include a scenario question about a crisis, audit finding, or regulatory breach. Prepare one detailed case study from your career that walks through your identification, escalation, and resolution process, and practice delivering it in under four minutes.
Negotiate beyond base salary at the offer stage
Director-level risk roles often carry professional development budgets, certification reimbursement for FRM or CRISC renewals, and D&O insurance provisions. Ask about these specifically during negotiation because they rarely appear in the initial offer letter and most candidates leave them on the table.
Director Of Risk Management Jobs: Frequently Asked Questions
Which companies are hiring the most director of risk managements?
The companies hiring the most director of risk managements right now include FirstService Residential, Apptronik, and Kirkland & Ellis, with the largest share of openings in California, Texas, and New York, based on current listings on Migrate Mate as of June 2026. Financial services, healthcare systems, and large insurers consistently maintain the highest volume of active postings for this role.
How many director of risk management jobs are remote?
About 20% of director of risk management openings are fully remote or hybrid as of June 2026, with availability varying by industry and company size. Sub-specializations in enterprise risk, operational risk advisory, and third-party risk management tend to offer the most remote flexibility, while roles tied to physical operations or regulated banking environments more often require on-site presence.
How do you become a director of risk management?
Most directors of risk management progress through analyst and manager-level risk roles, building expertise in a specific vertical such as credit, operational, or compliance risk before moving into leadership. Earning a professional certification like the FRM or CRISC accelerates advancement. Developing executive communication skills and experience presenting to audit committees or boards is essential for reaching the director level.
Can you get hired as a director of risk management without direct leadership experience?
It is possible to move into a director of risk management role without formal people management experience if you have deep functional expertise and a record of leading cross-functional risk initiatives. Employers in smaller organizations or growth-stage companies are more open to promoting strong individual contributors who have owned enterprise-wide programs and influenced senior decision-making without a direct reporting line.
What does the director of risk management interview process look like?
The process typically starts with a recruiter or HR screening call, followed by a competency-based interview with a VP or Chief Risk Officer focused on your framework experience and crisis response. A panel interview with cross-functional stakeholders from legal, finance, or operations is common. Some employers include a case study or written risk assessment to evaluate how you structure and communicate risk recommendations.
Where can I find and apply to director of risk management jobs?
You can find and apply to director of risk management jobs on Migrate Mate, which lists current openings from across the United States. Search the listings to find roles that match your background and apply directly to each one that fits.
See All 214+ Director Of Risk Management Jobs
Jump back to the full list of openings and apply to any director of risk management role that fits.
Find Jobs