Manages enterprise information security governance, risk, and compliance initiatives. Develops security policies and frameworks, leads data classification and threat modeling, conducts risk assessments, oversees vulnerability remediation, evaluates security controls, supports audits, and prepares risk metrics and executive reports. Partners with technical teams to embed security requirements and promotes governance best practices across the organization.
Information Security Governance Specialist Experience
6-10 Years
Job TitleInformation Security Governance Specialist
Job SummaryWe are seeking an experienced Information Security Governance Specialist to drive and manage enterprise information security governance, risk, and compliance initiatives. The ideal candidate will possess strong expertise in data classification, threat modeling, security controls, vulnerability management, risk assessment, and audit readiness.
This role is responsible for ensuring that security policies, standards, and controls are effectively designed, implemented, monitored, and governed to protect organizational assets while meeting regulatory and compliance requirements.
Key Responsibilities- Develop, implement, and maintain information security governance frameworks, policies, standards, and procedures.
- Lead enterprise-wide data classification and data protection initiatives.
- Conduct threat modeling exercises to identify risks and recommend security controls during system and application design.
- Perform security risk assessments and maintain risk registers for technology and business processes.
- Coordinate vulnerability management activities, including identification, remediation tracking, and reporting.
- Collect, review, and maintain security control evidence to support audits, compliance assessments, and regulatory requirements.
- Evaluate the effectiveness of security controls and recommend improvements to strengthen the security posture.
- Work closely with infrastructure, application, cloud, and platform teams to ensure security requirements are embedded in solutions.
- Facilitate risk mitigation planning and monitor remediation activities.
- Support internal and external audits, compliance reviews, and security assessments.
- Monitor emerging threats, vulnerabilities, and industry best practices to improve governance processes.
- Prepare security dashboards, metrics, and executive-level risk reports.
- Promote security awareness and governance best practices across the organization.
- Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field.
- 6-10 years of experience in Information Security Governance, Risk Management, Compliance, or Cybersecurity.
- Strong knowledge of information security principles, frameworks, and governance practices.
- Hands-on experience conducting risk assessments and threat modeling exercises.
- Experience implementing and managing data classification programs.
- Knowledge of security controls and control testing methodologies.
- Experience managing vulnerability assessment and remediation processes.
- Strong understanding of compliance and regulatory requirements.
- Excellent analytical, documentation, and communication skills.
- Ability to present risks and recommendations to technical and non-technical stakeholders.
Compensation, Benefits and Duration
Minimum Compensation: USD 37,000
Maximum Compensation: USD 132,000
Compensation is based on actual experience and qualifications of the candidate. The above is a reasonable and a good faith estimate for the role.
Medical, vision, and dental benefits, 401k retirement plan, variable pay/incentives, paid time off, and paid holidays are available for full-time employees.
This position is not available for independent contractors
No applications will be considered if received more than 120 days after the date of this post
Minimum Compensation: USD 37,000
Maximum Compensation: USD 132,000
Compensation is based on actual experience and qualifications of the candidate. The above is a reasonable and a good faith estimate for the role.
Medical, vision, and dental benefits, 401k retirement plan, variable pay/incentives, paid time off, and paid holidays are available for full-time employees.
This position is not available for independent contractors
No applications will be considered if received more than 120 days after the date of this post
Similar Jobs
.png)
eCommerce • Fintech • Hardware • Payments • Software • Financial Services
Own the full outbound sales cycle for mid-market merchants, including prospecting, pipeline development, discovery, demonstrations, negotiations, and closing. Develop tailored multi-product solutions, acquire new logos, collaborate with business development and cross-functional teams, maintain accurate Salesforce forecasting, and consistently achieve revenue targets.
Top Skills:
Salesforce
eCommerce • Fintech • Hardware • Payments • Software • Financial Services
Own a local territory through intensive field sales, conducting 50–60 weekly business visits, generating pipeline, delivering product demos, and closing full-cycle deals. Build relationships with local sellers, develop referral partnerships, support onboarding, and sell Square’s commerce software, hardware, and financial services across restaurant, retail, and service verticals. Maintain Salesforce pipeline discipline, forecast accurately, meet quotas, and continuously improve performance.
Top Skills:
Loyalty TechnologyPayment Processing TechnologyPayroll TechnologySalesforceTime Management Technology
eCommerce • Fintech • Hardware • Payments • Software • Financial Services
Owns a Pittsburgh territory through field-based prospecting, business visits, live product demonstrations, consultative selling, and full-cycle deal closing. The role builds pipeline through door-to-door outreach, events, referrals, networking, and partnerships; develops local seller relationships; supports onboarding; maintains Salesforce pipeline discipline; and consistently exceeds sales quotas across Square’s software, hardware, and financial services products.
Top Skills:
Payment ProcessingSalesforce
What you need to know about the Seattle Tech Scene
Home to tech titans like Microsoft and Amazon, Seattle punches far above its weight in innovation. But its surrounding mountains, sprinkled with world-famous hiking trails and climbing routes, make the city a destination for outdoorsy types as well. Established as a logging town before shifting to shipbuilding and logistics, the Emerald City is now known for its contributions to aerospace, software, biotech and cloud computing. And its status as a thriving tech ecosystem is attracting out-of-town companies looking to establish new tech and engineering hubs.
Key Facts About Seattle Tech
- Number of Tech Workers: 287,000; 13% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Amazon, Microsoft, Meta, Google
- Key Industries: Artificial intelligence, cloud computing, software, biotechnology, game development
- Funding Landscape: $3.1 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Madrona, Fuse, Tola, Maveron
- Research Centers and Universities: University of Washington, Seattle University, Seattle Pacific University, Allen Institute for Brain Science, Bill & Melinda Gates Foundation, Seattle Children’s Research Institute
