Information Security Governance Manager
Core
Lead Information Security Governance, Risk Management, and Compliance for a global fintech platform serving 1 billion consumers across 29 countries.
Role type
Senior Information Security Governance Manager
Builds
Security governance frameworks, compliance programs, and risk management strategies for a cross-border payments platform.
Domain
Fintech / Payments / Information Security
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure | physical/clinical work
Required skills
Information Security Risk Management, Information Security Governance, Compliance Frameworks (ISO 27001/27701/27018/PCI DSS), Team Leadership, Executive Reporting, Audit Coordination, Security Awareness Strategy, Third-Party Risk Management, Cloud Security Standards, AI-driven Process Automation
Preferred skills
CRISC, CISM, CISSP, ISO 27001 Lead Auditor/Implementer, NIST CSF, COBIT, SOX, Third-party risk management programs, Security incident response, Security culture building, AI/ML for governance automation
Technologies
ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, PCI DSS, NIST CSF, COBIT, SOX, AWS, GCP, Azure, KnowBe4, Wombat, MetaCompliance
Responsibilities
Lead and develop a high-performing Information Security team focused on Risk Management and Security Governance; Drive the identification, assessment, prioritization, and treatment of information security risks; Oversee the implementation, maintenance, and continuous improvement of compliance programs and certifications; Define and maintain the Information Security governance framework, including policies, standards, procedures, and control oversight; Coordinate internal and external audits, security assessments, and the execution of remediation and risk treatment plans; Define, monitor, and report security KPIs, KRIs, and program effectiveness metrics; Drive the organization's security awareness and culture strategy through training programs, phishing simulations, targeted campaigns, and employee engagement initiatives; Partner with cross-functional teams to embed security and risk management practices into business processes and strategic initiatives; Ensure security requirements are incorporated into new products, services, vendors, and third-party relationships from the earliest stages of engagement; Provide regular reporting on security governance, compliance status, risk landscape, and strategic initiatives to leadership and relevant governance forums.
Seniority
Senior, hands-on IC with team leadership
