Lead, Information Security - Governance & Controls Opens in window

Work for a company whose culture is built on respect

AT PRUDENTIAL AND PGIM, YOU CAN.

Here you’ll find a high-performance culture that’s flexible, collaborative, and grounded in respect. We engage with candor, take calibrated risks, and hold ourselves accountable — always focused on delivering for our customers. It’s the standard we choose every day as we grow, perform, and win as one team.

Are you interested in building capabilities that enable the organization with innovation, speed, agility, scalability, and efficiency? The Global Technology team takes great pride in our culture where digital transformation is built into our DNA! When you join our organization at Prudential, you’ll unlock an exciting and impactful career – all while growing your skills and advancing your profession at one of the world’s leading financial services institutions.

As a Lead, Information Security Operations in Network Security Governance & Standards, with a focus on firewall access management, you will execute request triage, risk treatment, and application of compensating controls. You will partner with other security professionals to strengthen the security of company data and assets by applying information and network security knowledge, mitigating controls, and lifecycle tracking. You will explain difficult concepts and influence others when describing risk, compensating controls in the service decision‑making process.

You will work on extremely complex problems that require evaluation of risk and controls. In addition to advanced technical expertise and experience, you will bring excellent problem‑solving, communication, and teamwork experience guiding the team in risk evaluation and exception triage results. In an evolving process maturity, you will coach team members in agile process and ceremonies, and apply an inclusive leadership attitude and a continuous learning focus to all that you do.

• Perform highly complex project and operational work, evaluating secure architecture against security requirements for assigned solutions and processes under the guidance of senior team members. Provide guidance to junior team members.
• Leverage knowledge of business and security systems/processes to identify risk and build strong, antifragile Information Security capabilities and improve tooling/processes to address these risks.
• Lead service delivery execution and guide junior team members in risk triage and exception processing, while partnering effectively with non‑technical security advisors.
• Maintain service catalog documentation, standard operating procedures, and stakeholder communication artifacts (e.g., security briefs, one‑pagers) that articulate service expectations, intake requirements, and governance principles to Security Advisors and cross‑functional teams.
• Coordinate cross‑functional teams in geographically disperse locations to execute daily service delivery operations for the network security request — including intake triage, risk assessment, and service delivery — while aligning to governance standards and escalating appropriately.
• Understand, measure and manage service capacity vs. demand and prioritize work, and when necessary, roll up your sleeves.
• Enjoy diving into complex technical network security and cloud/infrastructure architecture problems with an antifragile mindset.

• Bachelor of Computer Science or Engineering or related experience.
• Ability to manage work and maintain priority focus with minimal guidance, effectively leveraging diverse ideas, experiences and perspectives to benefit the organization.
• Experience with agile development methodologies.
• Knowledge of business concepts and information security tools and processes needed for making sound decisions in the context of the company’s business.
• Ability to learn new skills and knowledge on an ongoing basis through self‑initiative and tackling challenges.
• Excellent problem solving, communication and collaboration skills.
• Advanced experience and/or expertise with several of the following: NIST and ISO 27000 Standards, Information Security Control Standards and…