Manager, Security Governance

This is a fully remote position, open to applicants in California, +14 more states.

📋 Description

• Oversee staff to enhance enterprise security programs focused on compliance and risk factors.

• Direct governance of enterprise security initiatives.

• Generate reports that influence decisions at the executive and Board levels.

• Lead a team in developing enterprise-scale Security GRC solutions.

• Propel GRC technology transformation, process enhancement, automation, and AI-driven workflows.

• Manage Archer initiatives and collaborate with technology and security teams.

• Assist in hiring, performance management, and career advancement of Security Governance personnel.

• Prioritize and allocate tasks for risk-based security oversight across various business units and security domains.

• Lead projects aimed at enhancing the enterprise's security posture and mitigating security risks.

• Stay informed about enterprise security policies and standards.

• Aid in the development of security policies and standards.

• Identify regulatory changes impacting information security policies, standards, and procedures.

• Support security control owners in the design and implementation of controls.

• Direct the design, evaluation, and oversight of controls for security and IT projects, programs, applications, and systems.

• Manage remediation lifecycle activities, including tracking timelines, developing action plans, reviewing evidence, providing feedback, and documenting closure.

• Prepare governance documentation and reports for Senior Management and the Board.

• Enhance processes and contribute to team excellence.

• Lead complex projects, ensuring they are completed on time and within budget, while escalating concerns and providing weekly updates.

• Develop and implement practices for gathering, reporting, and representing security KPIs and KRIs.

• Conduct security metrics reporting and initiate information security process improvements.

• Adhere to all policies and standards.

⛳️ Requirements

• Bachelor's degree in Business, Information Technology, a related field, or equivalent experience is required.

• A minimum of 4 years of experience in security GRC, audit, compliance, and regulatory fields.

• CISA, CGEIT, CRISC, or CISM certification is required.

• CISSP certification is preferred.

• Proven experience in improving and automating Security GRC processes in collaboration with technology teams.

• Hands-on experience with Archer migrations, implementations, or platform buildouts is highly desired.

• Familiarity with ServiceNow IRM and other GRC technology platforms.

• Experience in leveraging AI and automation to enhance GRC capabilities and workflows.

• Expertise in process improvement utilizing Six Sigma or similar methodologies.

• Must be authorized to work in the U.S. without requiring employment-based visa sponsorship now or in the future.

🏝️ Benefits

• Competitive pay.

• Health insurance.

• 401K and stock purchase plans.

• Tuition reimbursement.

• Paid time off plus holidays.

• Flexible work arrangements including remote, hybrid, field, or office schedules.

• Additional forms of incentives may be included in total compensation.

• Equal opportunity employer committed to diversity.