Principal Information Security Engineer - Governance & Risk (Remote)
Core
Lead enterprise cybersecurity risk and governance strategy, including Third-Party Risk Assessment (TPRA), NIST Cybersecurity Framework (CSF) transformation, and external security posture management.
Role type
Principal Information Security Engineer (Governance & Risk)
Builds
Enterprise security programs, risk measurement practices, and executive reporting dashboards
Domain
Enterprise Information Security / Cybersecurity Governance
Deliverable
dashboards & analysis
Required skills
NIST CSF expertise, Third-Party Risk Management, Security Governance, Risk Assessment, Compliance Frameworks, Executive Reporting, Cloud Security, Policy Development, Audit Coordination, Stakeholder Influence
Preferred skills
CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor/Implementer
Technologies
NIST CSF, ISO 27001, COBIT, COSO, Microsoft technologies, Cloud platforms
Responsibilities
Lead enterprise cybersecurity risk assessments using NIST CSF; Assess and measure cybersecurity program maturity; Lead security assessments of vendors and suppliers; Develop dashboards and executive reporting on security risk; Partner with business leaders to prioritize remediation efforts; Coordinate independent security assessments and audits.
Seniority
Principal, strategy & mentorship
