Cyber Risk Specialist II

At Jabil (NYSE: JBL), we are proud to be a trusted partner for the world's top brands, offering comprehensive engineering, supply chain, and manufacturing solutions. With 60 years of experience across industries and a vast network of over 100 sites worldwide, Jabil combines global reach with local expertise to deliver both scalable and customized solutions. Our commitment extends beyond business success as we strive to build sustainable processes that minimize environmental impact and foster vibrant and diverse communities around the globe.

Job Summary

The Cyber Risk Specialist is a member of the Cybersecurity GRC team responsible for identifying, assessing, documenting, and supporting the management of cybersecurity risks across Jabil's production environment and critical business functions. This role conducts risk assessments, maintains risk documentation, collaborates with business and technology stakeholders, and supports efforts to strengthen Jabil's cybersecurity risk posture. The Cyber Risk Specialist contributes to continuous improvement initiatives and helps drive risk-informed decision making across the organization.

Key Responsibilities

Cyber Risk Management

• Conduct cybersecurity risk assessments for technologies, systems, applications, and business processes.
• Document and communicate risk assessment findings to stakeholders and risk owners.
• Support business partners in understanding cybersecurity risks and available mitigation options.
• Identify risks resulting from vulnerabilities, security incidents, assessments, and other cybersecurity activities.
• Maintain and update cybersecurity risk registers, including risk tracking and remediation activities.
• Assist in evaluating control effectiveness and residual risk.
• Identify opportunities to improve cybersecurity risk posture and recommend appropriate mitigating controls.
• Participate in risk reporting, trend analysis, and metrics collection activities.

• Partner with cybersecurity, IT, and business teams to support cyber risk management activities.
• Serve as a resource for cybersecurity risk-related questions and initiatives.
• Participate in projects focused on risk management and process improvement.
• Build effective working relationships with stakeholders across the organization.
• Share knowledge and best practices with team members and other Jabil locations.
• Support remediation efforts by coordinating with stakeholders to address identified risks and control gaps.

• Organize and prioritize workload to effectively manage multiple assignments.
• Support the delivery of high-quality customer service by responding promptly to stakeholder needs.
• Maintain confidentiality of sensitive, proprietary, and customer information.
• Contribute to continuous improvement efforts through data analysis, reporting, and process enhancements.
• Adhere to company policies, procedures, and information security requirements.

• Understanding of cybersecurity risk management principles and practices.
• Experience participating in risk assessments, security reviews, vulnerability management, or related cybersecurity activities.
• Working knowledge of security frameworks and standards such as NIST Cybersecurity Framework (CSF), ISO 27001, or similar frameworks.
• Strong analytical and problem-solving skills.
• Effective verbal and written communication skills.
• Ability to communicate technical concepts to both technical and non-technical audiences.
• Strong organizational skills with the ability to manage multiple priorities.
• Attention to detail and commitment to producing accurate work.
• Proficiency with Microsoft Office applications, including Excel, Word, PowerPoint, and Outlook.

• Experience working with Governance, Risk, and Compliance (GRC) platforms or risk management tools.
• Experience supporting cybersecurity risk management programs.
• Familiarity with cybersecurity metrics, reporting, and dashboard development.
• Knowledge of common cybersecurity controls, remediation strategies, and risk mitigation techniques.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, Business Administration, or a related field required.
• 3-5 years of experience in cybersecurity, risk management, information security, audit, or related disciplines.
• Professional certifications such as Security+, CISA, CRISC, or equivalent are preferred.
• Equivalent combinations of education, training, and experience will be considered.