Risk Manager Visa Sponsorship Jobs in Massachusetts
Massachusetts risk managers find opportunities across Boston's financial district, major insurers like Liberty Mutual and Hanover Insurance, and the state's extensive healthcare and biotech sectors. Cambridge, Boston, and Worcester anchor most hiring activity. Employers in banking, life sciences, and higher education regularly sponsor international candidates for qualified risk management professionals.
Find Risk Manager JobsOverview
Showing 5 of 96+ Risk Manager Jobs in Massachusetts with Visa Sponsorship
See all 96+ Risk Manager Jobs in Massachusetts with Visa Sponsorship
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Risk Manager Jobs in Massachusetts with Visa Sponsorship.
Get Access To All JobsWho we are looking for
The Managing Director, Cyber Risk & Third-Party Risk Management, is responsible for leading the enterprise cyber risk management program and maintaining effective governance over cyber risk identification, assessment, monitoring, reporting, and remediation activities, including those of third parties. The role owns the Cyber Risk Framework, Cyber Controls Assurance Program (CCAP), issue management, control governance, and management of first- and second-line audits and assessments.
Why this role is important to us
This role serves as the enterprise authority for cyber risk and third-party cyber risk management practices and provides leadership insights regarding aggregate cyber risk exposure, control effectiveness, and remediation performance.
What you will be responsible for
Cyber Risk Framework
- Influence enhancements to and operationalize Cyber Risk Management Framework including cyber risk taxonomy, methodologies, risk appetite alignment, risk reporting standards, assurance methodologies, testing standards, and control evaluation practices.
- Ensure cyber risks are consistently identified, assessed, monitored, escalated, and reported across the organization.
- Support risk aggregation, risk quantification, and emerging risk assessment activities.
- Lead the development, maturation, and maintenance of comprehensive cyber risk metrics and Key Risk Indicators (KRI) that provide meaningful, actionable insight into residual cyber risk, emerging trends, control maturity, and risk reduction outcomes, supporting executive, board, and regulatory oversight and risk-based decision making.
- Oversee assessment execution, quality assurance, challenge, and consistency across cybersecurity process areas and control domains.
- Monitor control effectiveness and remediation outcomes.
- Drive continuous improvement in assurance coverage and risk visibility.
Third Party Cyber Risk Management
- Own the Third-Party Cyber Risk Management framework and program.
- Serve as EPO Delegate for TPCRM.
- Oversee supplier cyber risk assessments, monitoring, remediation, and reporting.
- Govern critical supplier risk, concentration risk, and third-party control effectiveness.
- Ensure regulatory and enterprise requirements are embedded within TPCRM activities.
Control Governance
- Own cybersecurity control governance and accountability structures.
- Collaborate with FLRC to ensure appropriate control ownership, visibility, evidence requirements, and testing expectations support the risk framework.
- Ensure alignment between controls, risks, findings, and remediation activities.
- Drive continual improvement and rationalization of cybersecurity controls.
Issue Management
- Lead governance of cybersecurity issue management processes.
- Oversee issue intake, severity assessment, escalation, remediation tracking, validation, and closure.
- Monitor issue aging, systemic risk themes, and remediation effectiveness.
- Escalate material cyber risks through governance and executive forums.
Audit Management
- Lead cybersecurity audit management activities.
- Coordinate internal audit, external audit, and regulatory audit engagements.
- Oversee findings governance, remediation tracking, and closure validation.
- Monitor systemic themes and recurring control weaknesses.
ETRM / Targeted Risk Assessment Management
- Serve as primary cybersecurity partner to ETRM, ensuring TRA scoping well-defined and TRA outcomes are appropriately reflecting cyber risk.
- Coordinate technology risk assessment governance, challenge, and reporting.
- Ensure consistency and quality of TRAs and risk outcomes.
What we value
These skills will help you succeed in this role:
- Financial services and highly regulated industry experience.
- Experience with risk quantification methodologies and cyber risk analytics.
- Experience leading large-scale assurance and third-party risk transformation initiatives.
- Expertise in NIST, FAIR, COBIT, ISO 27001, and enterprise risk management frameworks.
- Strong strategic leadership and executive communication capabilities.
Education & Preferred Qualifications
- 15+ years of experience in cybersecurity risk management, technology risk, operational risk, audit, assurance, or enterprise risk leadership.
- Significant experience managing enterprise cyber risk and third-party risk programs.
- Deep expertise in cyber risk frameworks, control assurance, issue management, control governance, and audit management.
- Proven experience presenting aggregate risk themes and recommendations to executive leadership and Board committees.
- Strong understanding of risk appetite, risk quantification, assurance practices, and regulatory expectations.
- Bachelor's degree required; advanced degree preferred.
- CISSP, CRISC, CISM, CISA, or equivalent certifications.
Salary Range:
$170,000 - $282,500 Annual
The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.
Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.
About State Street
Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.
We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.
As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.
Job Application Disclosure:
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Who we are looking for
The Managing Director, Cyber Risk & Third-Party Risk Management, is responsible for leading the enterprise cyber risk management program and maintaining effective governance over cyber risk identification, assessment, monitoring, reporting, and remediation activities, including those of third parties. The role owns the Cyber Risk Framework, Cyber Controls Assurance Program (CCAP), issue management, control governance, and management of first- and second-line audits and assessments.
Why this role is important to us
This role serves as the enterprise authority for cyber risk and third-party cyber risk management practices and provides leadership insights regarding aggregate cyber risk exposure, control effectiveness, and remediation performance.
What you will be responsible for
Cyber Risk Framework
- Influence enhancements to and operationalize Cyber Risk Management Framework including cyber risk taxonomy, methodologies, risk appetite alignment, risk reporting standards, assurance methodologies, testing standards, and control evaluation practices.
- Ensure cyber risks are consistently identified, assessed, monitored, escalated, and reported across the organization.
- Support risk aggregation, risk quantification, and emerging risk assessment activities.
- Lead the development, maturation, and maintenance of comprehensive cyber risk metrics and Key Risk Indicators (KRI) that provide meaningful, actionable insight into residual cyber risk, emerging trends, control maturity, and risk reduction outcomes, supporting executive, board, and regulatory oversight and risk-based decision making.
- Oversee assessment execution, quality assurance, challenge, and consistency across cybersecurity process areas and control domains.
- Monitor control effectiveness and remediation outcomes.
- Drive continuous improvement in assurance coverage and risk visibility.
Third Party Cyber Risk Management
- Own the Third-Party Cyber Risk Management framework and program.
- Serve as EPO Delegate for TPCRM.
- Oversee supplier cyber risk assessments, monitoring, remediation, and reporting.
- Govern critical supplier risk, concentration risk, and third-party control effectiveness.
- Ensure regulatory and enterprise requirements are embedded within TPCRM activities.
Control Governance
- Own cybersecurity control governance and accountability structures.
- Collaborate with FLRC to ensure appropriate control ownership, visibility, evidence requirements, and testing expectations support the risk framework.
- Ensure alignment between controls, risks, findings, and remediation activities.
- Drive continual improvement and rationalization of cybersecurity controls.
Issue Management
- Lead governance of cybersecurity issue management processes.
- Oversee issue intake, severity assessment, escalation, remediation tracking, validation, and closure.
- Monitor issue aging, systemic risk themes, and remediation effectiveness.
- Escalate material cyber risks through governance and executive forums.
Audit Management
- Lead cybersecurity audit management activities.
- Coordinate internal audit, external audit, and regulatory audit engagements.
- Oversee findings governance, remediation tracking, and closure validation.
- Monitor systemic themes and recurring control weaknesses.
ETRM / Targeted Risk Assessment Management
- Serve as primary cybersecurity partner to ETRM, ensuring TRA scoping well-defined and TRA outcomes are appropriately reflecting cyber risk.
- Coordinate technology risk assessment governance, challenge, and reporting.
- Ensure consistency and quality of TRAs and risk outcomes.
What we value
These skills will help you succeed in this role:
- Financial services and highly regulated industry experience.
- Experience with risk quantification methodologies and cyber risk analytics.
- Experience leading large-scale assurance and third-party risk transformation initiatives.
- Expertise in NIST, FAIR, COBIT, ISO 27001, and enterprise risk management frameworks.
- Strong strategic leadership and executive communication capabilities.
Education & Preferred Qualifications
- 15+ years of experience in cybersecurity risk management, technology risk, operational risk, audit, assurance, or enterprise risk leadership.
- Significant experience managing enterprise cyber risk and third-party risk programs.
- Deep expertise in cyber risk frameworks, control assurance, issue management, control governance, and audit management.
- Proven experience presenting aggregate risk themes and recommendations to executive leadership and Board committees.
- Strong understanding of risk appetite, risk quantification, assurance practices, and regulatory expectations.
- Bachelor's degree required; advanced degree preferred.
- CISSP, CRISC, CISM, CISA, or equivalent certifications.
Salary Range:
$170,000 - $282,500 Annual
The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.
Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.
About State Street
Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.
We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.
As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.
Job Application Disclosure:
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Risk Manager Job Roles in Massachusetts
See all 96+ Risk Manager Jobs in Massachusetts
Sign up for free to filter by visa type, set job alerts, and find employers with verified sponsorship history.
Search Risk Manager Jobs in MassachusettsRisk Manager Jobs in Massachusetts: Frequently Asked Questions
Which companies sponsor visas for risk managers in Massachusetts?
Liberty Mutual, Hanover Insurance, State Street, Fidelity Investments, and Mass General Brigham are among Massachusetts employers with documented visa sponsorship histories for risk-related roles. Large financial institutions and hospital systems tend to have established immigration support infrastructure, making them more consistent sponsors than smaller firms. Biotech companies in the Cambridge corridor also hire for operational and clinical risk functions.
Which visa types are most common for risk manager roles in Massachusetts?
The H-1B visa is the most common visa for risk managers in Massachusetts, as the role typically qualifies as a specialty occupation requiring at least a bachelor's degree in finance, statistics, actuarial science, or a related field. Candidates with advanced degrees may also pursue EB-2 green card pathways. Those already holding L-1 visa status through multinational employers can sometimes transfer into risk management positions without entering the H-1B lottery.
Which cities in Massachusetts have the most risk manager sponsorship jobs?
Boston concentrates the majority of risk manager sponsorship activity, driven by its financial services, healthcare, and insurance sectors. Cambridge is a secondary hub, particularly for biotech and university-affiliated risk roles. Worcester hosts regional insurance and healthcare employers that occasionally sponsor, and Springfield's proximity to Hanover Insurance's regional operations adds additional opportunities outside the Greater Boston area.
How to find risk manager visa sponsorship jobs in Massachusetts?
Migrate Mate filters job listings specifically by visa sponsorship availability, making it easier to identify Massachusetts employers actively open to sponsoring risk manager candidates. Rather than sorting through general postings, you can search directly for risk management roles in Boston, Cambridge, or Worcester where sponsorship is confirmed or indicated. Migrate Mate's board is designed for international candidates navigating the H-1B and similar pathways.
Are there state-specific factors that affect risk manager visa sponsorship in Massachusetts?
Massachusetts employers must meet Department of Labor prevailing wage requirements when sponsoring H-1B workers, and the Boston metro area's prevailing wages for risk managers are among the higher benchmarks nationally, reflecting the region's cost of living. The state's concentration of universities, including Harvard, MIT, and Boston University, creates a steady pipeline of internationally educated candidates, which has made many local employers familiar with sponsorship processes compared to employers in less competitive markets.
What is the prevailing wage for sponsored risk manager jobs in Massachusetts?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.