At Genworth, we empower families to navigate the aging journey with confidence. We are compassionate, experienced allies for those navigating care with guidance, products, and services that meet families where they are. Further, we are the spouses, children, siblings, friends, and neighbors of those that need care—and we bring those experiences with us to work in serving our millions of policyholders each day.

We apply that same compassion and empathy as we work with each other and our local communities. Genworth values all perspectives, characteristics, and experiences so that employees can bring their full, authentic selves to work to help each other and our company succeed. We celebrate our diversity and understand that being intentional about inclusion is the only way to create a sense of belonging for all associates. We also invest in the vitality of our local communities through grants from the Genworth Foundation, event sponsorships, and employee volunteerism.

Our four values guide our strategy, our decisions, and our interactions:

Make it human. We care about the people that make up our customers, colleagues, and communities.
Make it about others. We do what's best for our customers and collaborate to drive progress.
Make it happen. We work with intention toward a common purpose and forge ways forward together.
Make it better. We create fulfilling purpose-driven careers by learning from the world and each other.

POSITION TITLE

Enterprise Manager, Technology & Third-Party Risk / Risk Data Analysis

POSITION LOCATION

Richmond, Virginia

This position is available to Virginia residents as Richmond, Virginia in-office applicants

*A Hybrid schedule of both Remote and In-Office days is required. In office days are Tuesday, Wednesday and Thursday with working hours targeting our core business hours of 9am-5pm EST.

YOUR ROLE

The Enterprise Manager, Technology & Third-Party Risk / Risk Data Analysis is a senior individual contributor responsible for identifying, assessing, monitoring, and reporting risks across technology, cybersecurity, and third-party domains, while leading risk data analytics, reporting, and automation efforts.

This role combines strong expertise in technology, cybersecurity, and third-party risk management with advanced capabilities in data analytics, executive storytelling, and automation, leveraging tools such as Power BI, Power Automate, PowerPoint, and AI-enabled solutions to modernize risk management processes and deliver actionable insights to leadership.

At the Manager level, this role operates with minimal supervision, significant independent judgment, and cross-functional influence, contributing to key organizational risk objectives.

What you will be doing

1. Technology & Cybersecurity Risk Management

Lead and execute enterprise-wide technology and cybersecurity risk assessments across applications, infrastructure, and cloud environments
Maintain technology risk registers, track remediation activities, and monitor risk exposure against defined appetite and tolerance
Align risk and control frameworks to industry standards (e.g., NIST, ISO 27001, SOC 2, CIS)
Partner with technology and security teams to prioritize and remediate vulnerabilities and control gaps
Develop and deliver risk reporting, including KPIs, KRIs, and risk heatmaps for leadership
Translate technical risks into clear business impacts for executive stakeholder

2. Third-Party / Vendor Risk Management

Advise on risk throughout the third-party risk management (TPRM) lifecycle, including onboarding, due diligence, risk assessment, monitoring, and offboarding
Conduct vendor risk assessments, including cybersecurity, operational, and compliance risks
Develop and maintain vendor risk inventory, tiering, and ongoing monitoring processes
Partner with Procurement, Legal, and Compliance teams to monitor adherence to policies and regulatory requirements
Track and manage vendor-related issues, incidents, and remediation plans
Deliver reporting and insights on third-party risk exposure to stakeholders

3. Risk Data Analytics & Reporting

Collect, validate, and analyze risk data from multiple sources (GRC tools, security platforms, vendor systems)
Develop and maintain Power BI dashboards (risk registers, KRIs, vendor risk metrics, trend analysis)
Produce executive-level PowerPoint presentations with clear, compelling risk narratives
Identify trends, anomalies, and emerging risks through advanced data analysis
Support data-driven decision-making through actionable insights and visualization
Ensure data accuracy, governance, and repeatability of reporting processes

4. Automation & AI Enablement

Design and implement Power Automate workflows to streamline risk processes (e.g., assessments, approvals, reporting)
Identify and eliminate manual processes through automation and process optimization
Leverage AI and Generative AI tools to enhance reporting, summarization, and analysis
Implement continuous improvement initiatives to increase efficiency and reduce cycle time
Support responsible use of AI by identifying and mitigating associated risks (e.g., data privacy, bias, accuracy)

What you bring

Education

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Business, Risk Management, Finance, or a related field

Experience

5+ years of experience in one or more of the following: Technology / Cyber Risk, Third-Party / Vendor Risk, Risk Management / GRC, or Risk Data Analytics
Experience conducting risk assessments and managing remediation activities
Familiarity with industry risk and control frameworks (e.g., NIST, ISO, SOC)

Technical & Analytical Skills

Strong proficiency in Power BI (dashboarding, data modeling, DAX)
Advanced Microsoft Excel skills for analytics and data manipulation
Advanced PowerPoint skills for executive presentations
Experience building dashboards, reports, and risk analytics
Ability to translate data into insights and actionable recommendations

Automation & AI

Experience using Power Automate or similar workflow automation tools
Familiarity with AI / Generative AI tools to improve productivity and analysis

Communication Skills

Strong written and verbal communication skills
Proven ability to create executive-level storytelling and presentations
Ability to translate technical concepts into business-friendly language

Nice to have

Professional certifications such as CISA, CRISC, CISM, CISSP, CTPRP, or PMP
Master's degree (MBA, MS Cybersecurity, or related field)
Experience with GRC platforms (e.g., Archer, ServiceNow GRC, OneTrust)
Knowledge of cloud platforms (AWS, Azure, GCP)
Experience with scripting or data tools (SQL, Python, PowerShell)
Experience presenting to senior leadership or risk committees

Employee Benefits & Well-Being

Genworth employees make a difference in people’s lives every day. We’re committed to making a difference in our employees’ lives.

Competitive Compensation & Total Rewards Incentives
Comprehensive Healthcare Coverage
Multiple 401(k) Savings Plan Options
Auto Enrollment in Employer-Directed Retirement Account Feature (100% employer-funded!)
Generous Paid Time Off – Including 12 Paid Holidays, Volunteer Time Off and Paid Family Leave
Disability, Life, and Long Term Care Insurance
Tuition Reimbursement, Student Loan Repayment and Training & Certification Support
Wellness support including gym membership reimbursement and Employee Assistance Program resources (work/life support, financial & legal management)
Caregiver and Mental Health Support Services

ADDITIONAL

At this time, Genworth will not sponsor a new applicant for employment authorization for this position.

National Range: $109,000 – $169,000

Disclaimer: This role is aligned to a national market-based pay range. Actual compensation will vary based on geographic location, experience, skills, and other job-related factors. In addition to base salary, this role is eligible to participate in a bonus incentive plan. Incentive compensation is based on individual and company performance and is not guaranteed.