Manager, Security Governance

Supervise staff to improve the enterprise security programs based on compliance and risk drivers. Lead governance of enterprise security initiatives and create reports that will impact decisions made at both the executive and Board levels.

In this remote role, you will lead a team focused on building innovative, enterprise-scale Security GRC solutions while driving GRC technology transformation, process improvement, automation, and AI-enabled workflows. You’ll play a key role in Archer initiatives, with Service Now IRM experience also valuable, and partner across technology and security teams to solve complex governance and risk challenges. This highly visible role will provide insights and reporting that influence senior leadership and Board-level decisions, with the opportunity to shape the future of Security GRC didates must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future.

Sponsorship and future sponsorship are not available for this opportunity, including employment-based visa types H-1B, L-1, O-1, H-1B1, F-1, J-1, OPT, or CPT.

• Support hiring, performance management, and career development of Security Governance staff to ensure alignment to defined goals.
• Prioritize and assign tasks to ensure appropriate risk-based security oversight across business units and security domains.
• Lead projects to improve and strengthen the enterprise security posture and reduce security risk including requirements collection, initiation, planning, execution, status reporting and closure.
• Maintain awareness of existing and proposed enterprise security policies and standards.
• Provide support in security policy and standard development.
• Identify regulatory changes that will affect information security policies, standards and procedures, and recommends appropriate changes.
• Support security control owners with control design and implementation
• Lead the design, evaluation and oversight of controls for key security and security IT projects, programs, applications and systems, e.g. the Enterprise Control Framework
• Lead activities related to the lifecycle of remediation activities including: delivery timeline tracking, action plan development, gathering and review of evidence artifacts, providing feedback regarding appropriateness of evidence artifacts, and development of documentation to submit for closure
• Prepare governance documentation for Senior Management including team, Board, and other reporting initiatives as needed.
• Continue to look for ways to improve processes and contributes to excellence in team.
• Leads complex projects, on time and on budget, escalating concerns and providing weekly updates.
• Develop and implement best practices regarding gathering, reporting and representation of security KPIs and KRIs to various stakeholders.
• Perform related duties as assigned or requested, including security metrics reporting and information security process improvements.
• Performs other duties as assigned
• Complies with all policies and standards.

• Bachelor’s degree in Business, Information Technology, related field, or equivalent experience required.
• 4+ years of experience in security GRC, audit, compliance, and regulatory required.

• CISA, CGEIT, CRISC, or CISM required. CISSP preferred.

• Experience improving and automating Security GRC processes in partnership with technology teams.
• Hands-on experience with Archer migrations, implementations, or platform buildouts highly desired.
• Familiarity with Service Now IRM and other GRC technology platforms.
• Experience leveraging AI and automation to enhance GRC capabilities and workflows.
• Process improvement expertise using Six Sigma or similar…