Information Security Manager – Cybersecurity Risk & Governance

Information Security Manager – Cybersecurity Risk & Governance

We are supporting a leading global financial services organisation with the appointment of an Information Security Manager to join its growing U.S. cybersecurity function in Dallas.

This is an opportunity for an experienced cybersecurity professional to take a broad role across information security governance, cyber risk and controls. Working across Technology, Risk, Compliance and business teams, you will help strengthen the organisation's cybersecurity posture and ensure key security risks, initiatives and remediation activities are effectively managed.

The role would suit someone who combines a strong understanding of cybersecurity risk and controls with the ability to communicate effectively with both technical teams and senior business stakeholders.

You will support the delivery and continued development of cybersecurity governance, risk and control activities across the U.S. organisation.

Key responsibilities will include:

• Assessing and helping prioritise cybersecurity risks, issues and emerging concerns.
• Coordinating cybersecurity initiatives, assessments, remediation activities and action plans.
• Tracking security issues and ensuring appropriate ownership, accountability and follow-through.
• Producing clear cybersecurity reporting, insights and updates for management and senior stakeholders.
• Providing risk-based recommendations to support security and business decision-making.
• Supporting the continued improvement of cybersecurity governance processes, controls, metrics and reporting.
• Working closely with Technology, Risk, Compliance and business stakeholders to ensure cybersecurity activities align with internal standards and regulatory expectations.
• Helping translate technical security issues into clear business risks, actions and recommendations.
• Contributing to the continued development of a strong and well-governed cybersecurity programme.

We are looking for someone with approximately 5+ years of experience across cybersecurity, information security, technology risk, security governance, IT risk or a related discipline.

You will ideally bring:

• Experience working across cybersecurity risk, governance and/or security controls.
• Experience with in a large, complex organisation.
• Previous exposure to a regulated environment such as banking, financial services, insurance or another highly regulated industry.
• Knowledge of recognised cybersecurity frameworks and standards such as NIST, CIS or ISO 27001.
• The ability to assess and interpret cybersecurity risks and translate technical information into practical business actions.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Confidence working with stakeholders across Technology, Risk, Compliance and the wider business.
• A proactive approach with the ability to take ownership of initiatives and follow through on commitments.
• Strong attention to detail and the ability to manage multiple priorities.

A degree in Computer Science, Information Security, Engineering, Business Technology Management or a related discipline would be beneficial, although equivalent practical experience will also be considered.

Cybersecurity certifications such as CISSP, CISM, CISA or Security+ would be advantageous but are not essential.