cybersecurity risk manager

Cybersecurity risk managers identify, analyse, assess, estimate and mitigate cybersecurity-related risks of ICT infrastructures such as systems or services. They manage these aspects by planning risk analysis, applying, reporting, assessing, communicating, and treating them. They establish a risk management strategy for the organisation and ensure that risks remain at an acceptable level for the organisation by selecting mitigation actions and controls.

The most in-demand skills for this role include ICT safety, internal risk management policy, ethical hacking principles, information security strategy, ICT network security risks, ICT security standards. These are the skills O*NET identifies as most important for competent performance.

Our AI-durability model gives cybersecurity risk manager a score of 0.55 on a 0-1 scale (higher = more exposure). That places it at moderate AI exposure — some tasks are being automated but the role adapts. Learning to work with AI tools rather than against them is the path forward.