Manager, Information Security Policy and Controls Governance

Manager, Information Security Policy and Controls Governance page is loaded## Manager, Information Security Policy and Controls Governance locations:
Chattanooga, Tennessee, USA:
Portland, Maine, USA:
Atlanta, Georgia, USA:
Columbia, South Carolina, USAtime type:
Full time posted on:
Posted Yesterday job requisition :
834265

Our Fortune 500 company is driving a digital transformation and looking for forward-thinking innovators to disrupt how our industry thinks about and uses technology. As one of the world's leading employee benefits providers, we help millions of people gain affordable access to benefits that help them protect their families, their finances and their futures.

We are seeking individuals to join our team of talented IT professionals who share never-ending passion and an unwavering focus on our customer experience. Team members comfortable working in an agile, fast-paced, and delivery-focused environment thrive in our environment where we value an entrepreneurial spirit and those who challenge the status-quo.

Unum is changing, and we’re excited about what’s next. Join us.## General

Summary:

The Manager - Information Security Policy and Controls Governance is responsible for strategic enhancement and day-to-day operation of key governance, risk, and compliance capabilities, including policy and standards governance, enterprise and application-level risk assessments, and controls management and attestation programs. This role will oversee the full lifecycle of governing documents, manage policy exceptions, coordinate external and regulatory assessments, and ensure strong alignment between security controls and regulatory requirements.

The manager will also drive consistent, timely issues management across all domains. This leader will partner closely with stakeholders across the organization to mature processes, strengthen compliance posture, and ensure effective, repeatable execution of GRC activities. They will manage a small to mid-size team of IT security and risk management professionals.
** Job Specifications
*** Bachelors degree in computer science, or relevant technical experience
* Has 5+ years experience in an IT Risk Management field, or equivalent relevant work experience
* Has a security technology background with strong knowledge of relevant technical security disciplines
* Exhibits courage by taking smart risks and encouraging others to do so; empowers innovative approaches by motivating others to be proactive and resourceful
* Able to effectively coach, mentor, identify, and address skills needs and gaps
* Proficient in methods and techniques for running effective meetings and for understanding and influencing the roles played by participants
* Displays good interpersonal skills at all levels of contact and in a wide variety of situations, able to listen and influence, and to relate to customers in their own language
* Demonstrates the ability to champion change and support teams through change.
* Demonstrates the ability to think critically, challenge conventional thinking and generate and apply unique business insight to create competitive advantage for the organization
* Has solid knowledge of regulations, including, GLPA, HIPAA, GDPR, CCPA, and other cyber security regulatory compliance requirements and related programs
* Has in-depth knowledge of security and control frameworks such as the NIST Cyber Security Framework, NIST SP 800-53, ISO 17799/27001, CobIT, and ITIL
* CRISC, CISSP, CISM, CISA, and other security related certifications are a plus
** Principal Duties and Responsibilities
*** Oversees and evaluates the delivery and effectiveness of the organizations policy governance, risk assessments, control attestation, and issues management capabilities, taking action to address performance or quality gaps as needed.
* Ensures the team maintains a well‑defined, risk‑aligned backlog of work that advances program maturity and meets regulatory, audit, and business needs.
* Guides team members in prioritizing assessments, policy lifecycle activities, and control-related work based on risk, business value, and regulatory timelines.
* Proactively removes obstacles and operational…