Director, Information Security Governance, Risk and Compliance

About the role

Oversees the processes and personnel involved in the Governance, Risk and Compliance (GRC) functions of the Information Security Department. Leads a team with a hands-on approach; ensures that risk assessments, security training and awareness, third party risk management, and other risk functions are performed in a consistent and thorough manner aligned with industry best practices and recognized security frameworks. Works with internal and external auditors to assess the maturity of the Information Security program. Furthers the maturity of the GRC program through the adoption and refinement of tools, standards, and processes in order to assist the overall Information Security Department to communicate and prioritize risk, and develop a risk-informed strategy for addressing current gaps and future threats.

Responsibilities

• Oversee risk assessments and ensure consistency and thoroughness
• Manage security training and awareness programs
• Lead third party risk management initiatives
• Collaborate with internal and external auditors to evaluate Information Security program maturity
• Advocate for and implement improvements to GRC tools, standards, and processes
• Support the development of a risk-informed strategy for addressing identified gaps and threats

Requirements

• Current Cybersecurity certification, such as CISSP, CISM, CISA, CRISC, GIAC, or equivalent
• Master's degree in Computer Science, Information Systems or a related field and 8+ years of full-time experience
• Bachelor's degree in Computer Science, Information Systems or a related field and 10+ years of full-time experience
• Associate's degree in Computer Science, Information Systems or a related field and 12+ years of full-time experience
• High School Diploma or High School Equivalency Diploma and 14+ years of full-time experience

Qualifications

• Education and Experience
• Certification Requirement

Skills

N/A

Benefits

N/A

Pay

Salary is commensurate with experience.

Schedule

First Shift (United States of America)

Contact

HR-PayAndBenefits@RoswellPark.org