Manager of Information Security Assurance

Job Summary

Leading the design and maturation of the information security assurance program, the full-time Manager of Information Security Assurance will oversee a team focused on establishing control frameworks, ensuring regulatory compliance, and enhancing operational efficiency, all while working remotely.

Key responsibilities

• Manage and continuously improve governance, controls design, and security awareness programs while ensuring adherence to regulatory requirements
• Serve as a subject matter expert in information security assurance, contributing to control narratives, audit responses, and regulatory engagements
• Oversee the PCI DSS program and third-party risk management, driving automation and standardization across assurance services

Required qualifications

• Minimum 10 years of experience in GRC, information security, or related fields
• At least 5 years of direct people leadership experience, including talent development and performance management
• Proven experience in PCI DSS environments, including control design and testing
• Strong knowledge of governance frameworks such as NIST Cybersecurity Framework and NYDFS Part 500
• Bachelor's degree in Information Security, Computer Science, Information Systems, or a related discipline