Senior Security Governance
Core
Define and execute Information Security Governance, Risk, and Compliance (GRC) strategy, including roadmap development, policy creation, and compliance assessments.
Role type
Senior Security Governance & Compliance Lead
Builds
Security policies, standards, procedures, control libraries, and GRC platforms
Domain
Information Security / Cybersecurity / Compliance
Deliverable
dashboards & analysis
Required skills
GRC principles, security frameworks (NIST CSF, ISO 27001, PCI-DSS, GDPR), policy development, audit support, stakeholder management, executive reporting
Preferred skills
CISSP, CISM, CISA, CIPP, CRISC, CGEIT, GRCP, Security+ certifications
Technologies
NIST CSF, NIST 800-53, ISO 27001, CIS Controls, PCI-DSS, GDPR, SOX, GLBA
Responsibilities
Develop and maintain security policies, standards, and procedures; Lead day-to-day governance activities; Support compliance assessments and audits; Produce reporting and metrics for leadership; Foster relationships with business and IT stakeholders to embed security requirements
Seniority
Senior, hands-on IC
