Information Security Governance Specialist

6-10 Years

Information Security Governance Specialist

We are seeking an experienced Information Security Governance Specialist to drive and manage enterprise information security governance, risk, and compliance initiatives. The ideal candidate will possess strong expertise in data classification, threat modeling, security controls, vulnerability management, risk assessment, and audit readiness.

This role is responsible for ensuring that security policies, standards, and controls are effectively designed, implemented, monitored, and governed to protect organizational assets while meeting regulatory and compliance requirements.

• Develop, implement, and maintain information security governance frameworks, policies, standards, and procedures.
• Lead enterprise-wide data classification and data protection initiatives.
• Conduct threat modeling exercises to identify risks and recommend security controls during system and application design.
• Perform security risk assessments and maintain risk registers for technology and business processes.
• Coordinate vulnerability management activities, including identification, remediation tracking, and reporting.
• Collect, review, and maintain security control evidence to support audits, compliance assessments, and regulatory requirements.
• Evaluate the effectiveness of security controls and recommend improvements to strengthen the security posture.
• Work closely with infrastructure, application, cloud, and platform teams to ensure security requirements are embedded in solutions.
• Facilitate risk mitigation planning and monitor remediation activities.
• Support internal and external audits, compliance reviews, and security assessments.
• Monitor emerging threats, vulnerabilities, and industry best practices to improve governance processes.
• Prepare security dashboards, metrics, and executive-level risk reports.
• Promote security awareness and governance best practices across the organization.

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field.
• 6-10 years of experience in Information Security Governance, Risk Management, Compliance, or Cybersecurity.
• Strong knowledge of information security principles, frameworks, and governance practices.
• Hands-on experience conducting risk assessments and threat modeling exercises.
• Experience implementing and managing data classification programs.
• Knowledge of security controls and control testing methodologies.
• Experience managing vulnerability assessment and remediation processes.
• Strong understanding of compliance and regulatory requirements.
• Excellent analytical, documentation, and communication skills.
• Ability to present risks and recommendations to technical and non-technical stakeholders.