IS Information Security Governance Manager

Description

• Continuous Improvement: Drive maturity initiatives and adoption of best practices across the governance structure.
• Risk Management: Integrate risk processes into governance, manage risk acceptance/escalation, and ensure visibility at appropriate levels.
• Policy & Standards: Ensure clear definition, communication, and adherence to security policies. Oversee policy lifecycle and compliance reporting.
• Governance Framework: Develop and refine a governance model aligned with NIST CSF, ISO 27001, COBIT, and organizational risk appetite.
• Program Oversight: Monitor effectiveness of security functions (Risk, Compliance, SOC, Training, Tech Ops) using KPIs/KRIs. Lead governance forums and report to leadership.
• Strategic Alignment: Translate security strategy into governance requirements and integrate InfoSec governance into enterprise decision-making.
• Compliance Oversight: Align regulatory requirements with governance and oversee reporting to internal and external stakeholders.

Requirements

• 10+ years of progressive experience in information security, with at least 5 years dedicated to Information Security Governance, GRC, or related oversight roles in a very large enterprise.
• Deep understanding of enterprise Security risk management principles and how information security risk integrates into broader organizational risk.
• Bachelor's degree in Information Security, Computer Science, Business Administration, or a related field. Master's degree preferred.
• Proven experience in establishing, implementing, and maturing information security governance frameworks (e.g., leveraging NIST CSF, ISO 27001, COBIT).
• Strong knowledge of information security domains (e.g., risk management, policy, compliance, operations, awareness) and the ability to define oversight mechanisms without dictating operational execution.

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance