Lead, Information Security Library & Standards
Core
Lead the development and governance of an enterprise Information Security control library, standards, and frameworks to support risk management and compliance across the organization.
Role type
Senior IC Information Security Governance Lead
Builds
Scalable control libraries, security standards, and governance processes
Domain
Information Security / Governance, Risk, and Compliance (GRC)
Required skills
Security control library design, standards lifecycle management, framework mapping (NIST, ISO 27001, FFIEC, NYDFS), risk alignment, tabletop exercise facilitation, stakeholder partnership, documentation, process improvement
Preferred skills
GRC tooling experience, audit support, GRC platform familiarity, CISSP/CISM/CRISC/CISA certifications
Technologies
NIST, ISO 27001, FFIEC, NYDFS, SOC
Responsibilities
Lead development and governance of the Information Security control library; Define control taxonomy and ownership models; Coordinate lifecycle management of security standards; Align standards with regulatory requirements; Lead cybersecurity tabletop exercises; Partner with stakeholders to drive adoption of governance standards
Seniority
Senior, hands-on IC
