Manages enterprise information security governance, risk, and compliance initiatives. Develops security policies and frameworks, leads data classification and threat modeling, conducts risk assessments, oversees vulnerability remediation, evaluates security controls, supports audits, and prepares risk metrics and executive reports. Partners with technical teams to embed security requirements and promotes governance best practices across the organization.
Information Security Governance Specialist Experience
6-10 Years
Job TitleInformation Security Governance Specialist
Job SummaryWe are seeking an experienced Information Security Governance Specialist to drive and manage enterprise information security governance, risk, and compliance initiatives. The ideal candidate will possess strong expertise in data classification, threat modeling, security controls, vulnerability management, risk assessment, and audit readiness.
This role is responsible for ensuring that security policies, standards, and controls are effectively designed, implemented, monitored, and governed to protect organizational assets while meeting regulatory and compliance requirements.
Key Responsibilities- Develop, implement, and maintain information security governance frameworks, policies, standards, and procedures.
- Lead enterprise-wide data classification and data protection initiatives.
- Conduct threat modeling exercises to identify risks and recommend security controls during system and application design.
- Perform security risk assessments and maintain risk registers for technology and business processes.
- Coordinate vulnerability management activities, including identification, remediation tracking, and reporting.
- Collect, review, and maintain security control evidence to support audits, compliance assessments, and regulatory requirements.
- Evaluate the effectiveness of security controls and recommend improvements to strengthen the security posture.
- Work closely with infrastructure, application, cloud, and platform teams to ensure security requirements are embedded in solutions.
- Facilitate risk mitigation planning and monitor remediation activities.
- Support internal and external audits, compliance reviews, and security assessments.
- Monitor emerging threats, vulnerabilities, and industry best practices to improve governance processes.
- Prepare security dashboards, metrics, and executive-level risk reports.
- Promote security awareness and governance best practices across the organization.
- Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field.
- 6-10 years of experience in Information Security Governance, Risk Management, Compliance, or Cybersecurity.
- Strong knowledge of information security principles, frameworks, and governance practices.
- Hands-on experience conducting risk assessments and threat modeling exercises.
- Experience implementing and managing data classification programs.
- Knowledge of security controls and control testing methodologies.
- Experience managing vulnerability assessment and remediation processes.
- Strong understanding of compliance and regulatory requirements.
- Excellent analytical, documentation, and communication skills.
- Ability to present risks and recommendations to technical and non-technical stakeholders.
Compensation, Benefits and Duration
Minimum Compensation: USD 37,000
Maximum Compensation: USD 132,000
Compensation is based on actual experience and qualifications of the candidate. The above is a reasonable and a good faith estimate for the role.
Medical, vision, and dental benefits, 401k retirement plan, variable pay/incentives, paid time off, and paid holidays are available for full-time employees.
This position is not available for independent contractors
No applications will be considered if received more than 120 days after the date of this post
Minimum Compensation: USD 37,000
Maximum Compensation: USD 132,000
Compensation is based on actual experience and qualifications of the candidate. The above is a reasonable and a good faith estimate for the role.
Medical, vision, and dental benefits, 401k retirement plan, variable pay/incentives, paid time off, and paid holidays are available for full-time employees.
This position is not available for independent contractors
No applications will be considered if received more than 120 days after the date of this post
Similar Jobs
Artificial Intelligence • Cloud • Software • Infrastructure as a Service (IaaS)
Generate qualified pipeline across cloud and AI use cases through targeted outbound prospecting and inbound lead follow-up. Research accounts, engage technical decision-makers, conduct discovery and qualification calls, schedule meetings for Account Executives, and maintain accurate CRM activity. The role requires strong communication, prioritization, organization, curiosity about technical concepts, and collaboration with sales and marketing teams in a remote environment.
Top Skills:
Ai/MlCloud InfrastructureCRMIaasLinkedin Sales NavigatorOutreachPaasSalesforceSalesloftZoominfo
Digital Media • eCommerce • Gaming • Mobile • News + Entertainment
Leads IT and security governance, risk, and compliance programs across globally distributed teams. Plans and tracks initiatives, manages schedules, dependencies, risks, audits, controls, vendors, and remediation activities. Establishes repeatable processes, coordinates stakeholders, facilitates meetings, and communicates progress to senior leaders. Requires extensive program management experience, knowledge of cybersecurity and regulatory frameworks, audit and assurance expertise, and strong cross-functional communication skills. This is an onsite role in Dallas with occasional travel.
Top Skills:
AgileAi GovernanceCcpaConfluenceCpraEu Cyber Resilience ActGdprGoogle SuiteHipaaIso 27001Iso 27002JIRANist Csf 2.0Nist Sp 800-53Pci DssPrivacy By DesignSmartsheetSoc 2Sox ItgcWaterfall
Edtech • Information Technology • Software
Own revenue expansion for assigned State, Local, and Education (SLED) accounts. Manage full sales cycle from lead to close, build executive relationships, develop account strategies, drive adoption of Pluralsight, coordinate extended account team, manage pipeline and forecasting, and meet quota while supporting customer success.
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
