Security Governance and Risk Manager

This is a fully remote position, open to applicants in United States.

📋 Description

• Transform intricate frameworks into straightforward, actionable standards

• Ensure these standards are integrated into daily operations rather than remaining theoretical

• Convert group security frameworks into applicable policies, controls, and procedures

• Cultivate and enhance a Security-by-Design culture throughout projects, platforms, and teams

• Provide affiliates with effective tools, training, and hands-on support to empower their progress

• Establish and lead a structured risk management cycle across the organization

• Assist teams in recognizing risks, outlining actions, and monitoring tangible progress

• Oversee implementation, identify gaps, and share clear insights with senior leadership

• Promote corrective measures and continuous enhancement across affiliates

• Facilitate audit readiness and ensure that evidence and documentation are complete and accurate

• Collaborate with IT, PMO, and business teams to ensure governance aligns with actual business needs

• Serve as a trusted advisor to leadership concerning risk, compliance, and security priorities

• Learn from incidents and convert insights into more robust policies and controls

⛳️ Requirements

• Master’s degree in Information Security, IT, or a related discipline

• 8–12 years of experience in information security, emphasizing governance, risk, and compliance

• Translate frameworks such as ISO 27001, NIST, NIS2, CIS Controls, SOC 2, or IEC 62443 into implementable policies

• Develop and enhance security maturity programs across various teams or regions

• Comprehend risk management frameworks and apply them in intricate environments

• Support audits and maintain organized, ready evidence

• Work with contemporary security ecosystems, including cloud security (Azure), SIEM, SOC, CIAM, PAM, or ServiceNow

• Hands-on experience with Security-by-Design in project execution and procurement

• Relevant certifications such as CISSP, CISM, or ISO 27001 Lead Implementer/Auditor enhance your profile

• Communicate effectively, influence stakeholders, and establish trust at all levels

• Maintain organization, think proactively, and take ownership

• Connect with individuals, challenge the status quo, and continuously seek improvement

🏝️ Benefits

• A pivotal role with significant impact and visibility within an international organization

• The chance to shape and strengthen group-wide security standards and strategy

• A network of experts that allows you to connect, learn, and grow continuously

• Flexibility in your work approach, with consideration for your work-life balance

• A competitive salary package with additional benefits aligned with your experience