Security Industry Specialist, Security Policy Governance
Core
Develop, maintain, and govern enterprise security policies and standards to ensure clear, actionable expectations and consistent security practices across the company.
Role type
Senior Security Policy Governance Specialist
Builds
Enterprise security policy framework, machine-readable policy artifacts, and automated enforcement mechanisms
Domain
Information Security / Risk Management / Compliance
Required skills
Security policy authoring, risk assessment, stakeholder engagement, regulatory compliance analysis, policy exception management, security awareness program design, cross-functional collaboration, policy lifecycle management, threat analysis, automation strategy
Preferred skills
Technical security assessments, major compliance frameworks (ISO 27001, ISO 22301, ISO 27701, ISO 9001, PCI, SOC1/SOC 2, HITRUST)
Technologies
AI/ML tools, automation tooling, machine-readable policy formats
Responsibilities
Develop and maintain enterprise security policies and standards; Drive policy quality improvements through structured review cycles; Identify policy gaps by analyzing emerging threats and regulatory changes; Partner with cross-functional teams to ensure policies are practical and enforceable; Lead initiatives for automated policy enforcement; Innovate the policy lifecycle through automation and AI/ML; Serve as a subject matter expert for security policy; Manage the policy exception process; Develop and deliver policy awareness and education programs
Seniority
Senior, hands-on IC