Cybersecurity Governance

Cybersecurity Governance Jobs

4 jobs found

Today

Director, Cybersecurity

Competitive Power Ventures Maryland

Maryland

Today

$165k - $195k/yr Full time Ai Security Cloud Platforms Cybersecurity Governance

Apply Now

Job Description

Competitive Power Ventures is building resilient security across corporate IT and operational technology environments, and this role leads the enterprise program to help reduce cyber risk, support regulatory readiness, and strengthen security operations. Based onsite in Maryland (Silver Spring, MD), this leadership position combines strategic planning, governance, and day-to-day oversight of security capabilities.

What you’ll do

Develop, maintain, and execute CPV’s enterprise cybersecurity strategy and multi-year cybersecurity roadmap.
Advise the Vice President of Information Technology and senior management on cybersecurity risks, emerging threats, regulatory developments, and recommended investments.
Establish cybersecurity priorities based on business risk, regulatory requirements, operational needs, and CPV’s risk tolerance.
Create annual cybersecurity objectives, budgets, initiatives, and performance metrics.
Provide cybersecurity leadership across corporate IT, cloud, SaaS, data, and OT environments.
Coordinate cybersecurity activities across CPV’s corporate offices and generation assets, including vulnerability, testing, and remediation programs.
Manage cybersecurity personnel and third-party resources, including consultants and managed security providers.
Develop, maintain, and enforce cybersecurity policies, standards, procedures, and technical controls.
Maintain governance across access management, privileged access, change management, vulnerability management, incident response, data protection, third-party security, remote access, and artificial intelligence.
Lead enterprise cybersecurity risk assessments and maintain visibility into significant cyber risks.
Oversee cybersecurity monitoring and security operations, including endpoint, identity, email, cloud, network security, threat detection, and security monitoring.
Own the incident response program, including plans, escalation procedures, communications protocols, and response playbooks.
Coordinate tabletop exercises and incident simulations with IT, OT, Legal, Communications, Human Resources, Asset Management, and senior leadership.
Partner with Infrastructure & Operations and business stakeholders for disaster recovery and business continuity planning.
Support OT cybersecurity protections for operational environments, including SCADA and new plant or renewable asset cybersecurity requirements.
Support CPV’s compliance obligations, including NERC CIP requirements, and maintain alignment with NIST CSF.
Coordinate cybersecurity audits, assessments, evidence collection, remediation activities, and management responses with internal and external stakeholders.
Lead cybersecurity awareness and education, including training, phishing and social engineering exercises, and targeted security communications.
Deliver regular executive reporting on cyber risks, incidents, vulnerabilities, remediation progress, compliance, and program maturity, including reporting to governance bodies as required.

What you bring

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline (or equivalent professional experience).
Approximately 10+ years of progressive experience in cybersecurity, information technology, infrastructure, or related disciplines.
At least 5 years of cybersecurity leadership or management experience.
Demonstrated experience developing or managing an enterprise cybersecurity program.
Strong understanding of cybersecurity risk management, security architecture, vulnerability management, incident response, identity and access management, and security operations.
Experience with cloud and SaaS environments, particularly Microsoft technologies.
Experience managing cybersecurity vendors, consultants, and managed security service providers.
Strong written, verbal, executive presentation, and stakeholder-management skills.
Ability to translate complex technical risks into understandable business risks and recommendations.
Preferred: power generation, energy, utility, industrial, or critical infrastructure sector experience.
Preferred: experience presenting to executive management, Audit Committees, or Boards.
Preferred certifications: CISSP and/or relevant Microsoft or cloud security certifications.
Must pass a pre-employment background and financial credit check.

Tools and frameworks you’ll work with

NERC CIP, NIST Cybersecurity Framework (CSF), SCADA
Microsoft technologies, cloud, SaaS
Artificial intelligence and generative AI, including AI platforms and AI agents

Compensation and benefits

Base salary range: USD 165,000 - 195,000 per year (company’s good faith estimate).

Annual discretionary bonus up to 30%
PTO: 160 hours per year
Up to 13 company-paid holidays
Medical, dental, and vision: 100% company paid
401(k): 100% company match up to 6%
Life insurance
Short- and long-term disability
Parental leave
Flexible spending accounts

View full job page →

Today

Cybersecurity Business Resilience Principal

Cummins Inc. Columbus, IN

Columbus, IN

Today

Full time Cloud Platforms Cyber Resilience Cyber Risk Assessment

Apply Now

Job Description

Cybersecurity Advisor Principal role in Systems/Information Technology focused on strengthening enterprise security posture and business resilience in Columbus, IN.

Responsibilities

Identify vulnerabilities, assess risks, and implement risk-based security controls to protect critical systems and data.
Ensure compliance with security frameworks and regulatory requirements by applying standards, governance practices, and cybersecurity policies across technology solutions.
Analyze vulnerability and configuration data to proactively detect security threats and recommend remediation strategies before business impact.
Partner across teams to influence secure technology design and implementation across the solution development lifecycle.
Review systems and architectures to identify security weaknesses and recommend improvements that support business objectives while reducing operational risk.
Translate emerging threats and vulnerabilities into actionable recommendations for leaders and stakeholders to support informed decision-making.
Apply secure architecture, secure design, and secure coding practices to support confidentiality, integrity, availability, authentication, and non-repudiation.
Mentor less experienced team members and build stakeholder relationships to deliver collaborative solutions with measurable business value.
Design, lead, and implement an IT organization strategy to ensure Disaster Recovery plans exist for every application used at plant sites.
Coordinate with application owners to define, test, and audit DR plans.
Coordinate and participate in testing activities.
Establish and maintain control points for resilience and recovery KPIs.
Design and update disaster recovery and Pace plans.
Conduct risk assessments and support ongoing compliance.
Prepare reports and continuously improve application strategies.

Requirements

5+ years of experience.
College, university, or equivalent degree in Computer Science, Information Technology, or related subject, or relevant equivalent experience.
CISSP or similar certification preferred.
May require licensing for compliance with export controls or sanctions regulations.
Ability to balance multiple stakeholder needs and manage complex, high-volume, sometimes contradictory information.
Demonstrated capability in business insight, collaboration, engagement, and instilling trust through honesty, integrity, and authenticity.
Business analysis planning skills: identify activities for business analysis across five business aspects, level of detail, and requirements elicitation approach to plan resources and document needs and solution characteristics.
Cybersecurity risk management: identify and assess potential impact of cybersecurity risks against industry frameworks, regulations, and organizational policies to develop and implement mitigation strategies aligned to business objectives.
Strategic planning and policy advocacy: identify policy gaps enabled by cybersecurity technologies that protect Cummins data and business information systems.
Systems analysis: design information systems solutions using solution design documents and the security review tool to help the organization operate more securely, efficiently, and effectively.
Systems security requirements planning: gather and evaluate security requirements in cross-functional meetings, translate requirements for technical solutions, and guide partners on applying security requirements through Cummins governance processes to reduce business risk.
Values differences: recognize the value of diverse perspectives and cultures.

Additional Information

Location: Columbus, IN (onsite)
Job type: Exempt - Experienced
Organization: Cummins Inc.
Technologies: Cloud technology
Role category: Off-site Remote
Relocation package: No
100% on-site: No
REQID: 2436913
100% Remote: Not specified

View full job page →

Today

Sr. Manager, Cybersecurity Program Management

Crocs, Inc. Broomfield, CO

Broomfield, CO

Today

$140k - $150k/yr Full time Manager Senior Cybersecurity Governance

Apply Now

Job Description

Crocs, Inc. is looking for a Sr. Manager, Cybersecurity Program Management to help lead the planning, execution, governance, and continuous improvement of its global cybersecurity program. In this hybrid role based in Broomfield, CO, you will partner across teams to deliver cybersecurity initiatives, reduce enterprise risk, and raise cybersecurity maturity with executive visibility and accountability.

You will be responsible for turning cybersecurity strategy into measurable, governed programs that align security investment with business objectives. The role also emphasizes cross-functional coordination, executive-ready reporting, and building a team culture focused on accountability and continuous improvement.

Responsibilities

Implement cybersecurity strategy through prioritized programs and initiatives, establishing governance, performance metrics, and reporting tied to security investment, risk reduction, and business objectives.
Lead cybersecurity programs and remediation initiatives, overseeing vulnerability management, security assessments, audits, compliance activities, and the resolution of program risks, dependencies, and escalations.
Drive accountability across business and technology teams by coordinating remediation commitments, monitoring execution, and ensuring timely delivery of security and risk reduction outcomes.
Build and influence cross-functional partnerships across cybersecurity, technology, and business organizations, translating technical issues into business risk, actionable plans, and executive decision-making insights.
Develop and maintain processes for security findings, remediation tracking, compliance alignment, and consistent program management, reporting, and documentation standards.
Monitor key risk and performance indicators using dashboards, scorecards, and trend analysis to measure program effectiveness and identify continuous improvement opportunities.
Provide data-driven reporting and executive communications on program status, risks, remediation progress, and cybersecurity outcomes for leadership governance reviews.
Build, coach, and develop a high-performing cybersecurity program team, fostering accountability, collaboration, continuous improvement, and alignment with Crocs Leadership Blueprint expectations.

Requirements

Bachelor’s degree in Business, Information Technology, Cybersecurity, or related field.
8+ years of program or project management experience, including 3+ years leading teams.
Experience leading large-scale cybersecurity, technology, or risk management programs.
Strong knowledge of cybersecurity concepts including maturity and risk assessments, risk heat maps, SOX and SOC reporting, PCI, and related areas.
Understanding of Identity Access Management and Vendor Risk Management and how to operate these risk areas.
Ability to work cross-functionally with technology and business stakeholders.
Exceptional communication, facilitation, and stakeholder management skills, with a demonstrated ability to drive outcomes through influence and collaboration.
Experience with task automation, dashboard development, metrics, and reporting.

Benefits

Medical coverage
Dental coverage
Vision coverage
Life and AD&D
Short and long-term disability coverage
Paid time off
Employee assistance
401k program with company match
Company benefits including but not limited to medical, dental, and vision coverage, life and AD&D, short and long-term disability coverage, paid time off, employee assistance, and many additional voluntary benefits
Eligibility to participate in a company incentive program

Job Location and Work Pattern

Location: Broomfield, CO, US 80021
Work model: Hybrid (aligned to the Collaborator persona)
Time in office: Collaborator persona indicates 4 days in office
Nearest major market: Denver

View full job page →

Today

Sr Manager, IT Cybersecurity Governance, Risk & Compliance

American Airlines Fort Worth, TX

Fort Worth, TX

Today

Full time Manager Senior Cybersecurity Governance

Apply Now

Job Description

Own cybersecurity governance across enterprise risk, compliance readiness, and cyber execution as a senior leader on an onsite team in Fort Worth.

Responsibilities

Lead Cybersecurity Governance Capabilities: Set direction for governance capabilities that ensure policies, standards, control expectations, and risk management practices are practical, scalable, clearly owned, and aligned to enterprise priorities.
Oversee Cybersecurity Chief of Staff function: Provide leadership and direction for the Cybersecurity Chief of Staff role to support leadership cadence, executive communications, decision support, cross-functional coordination, and follow-through on key actions and commitments.
Drive cyber strategy, planning, and execution: Translate cybersecurity strategy into priorities, roadmaps, operating rhythms, and measurable outcomes; partner with cyber leaders to prioritize, resource, govern, and deliver against commitments.
Oversee cyber products and enterprise capabilities: Shape roadmaps, prioritize investments, track outcomes, and ensure delivery supports risk reduction, regulatory readiness, and operational effectiveness.
Lead cybersecurity work management and financial planning: Manage cybersecurity work intake, prioritization, resource planning, budget tracking, financial forecasting, and portfolio reporting to improve transparency, accountability, and investment decisions.
Strengthen risk, compliance, and executive reporting: Coordinate across Cybersecurity, Technology, Legal, Finance, Audit, Privacy, and business teams to align risk and compliance efforts, support regulatory obligations, and deliver clear, outcome-focused reporting to senior leadership.
Build and develop high-performing teams: Lead, coach, and develop team members and managers; promote collaboration, ownership, sound judgment, accountability, and consistent delivery across complex cybersecurity initiatives.

Requirements

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Business, Risk Management, Compliance, Audit, or a related discipline, or equivalent experience/training.
7+ years of experience in cybersecurity, information technology, risk management, compliance, audit, governance, or a closely related field.
5+ years of leadership experience.
Experience delivering and leading cybersecurity and governance activities, including risk management, compliance, audit, and related enterprise programs.
Experience leading cybersecurity governance and related programs, including setting priorities, defining outcomes, and improving program maturity.
Experience overseeing security audits, assessments, control assurance activities, remediation governance, and executive reporting to ensure ownership, accountability, and timely risk reduction.
Experience applying regulatory, risk, compliance, and control frameworks such as NIST, ISO 27001, PCI DSS, SOX, SOC 2, CMMC, and GDPR, or similar standards to guide strategy, prioritization, governance, and decision-making.
Ability to set strategic direction, define capability roadmaps, prioritize work, and align cyber products and services to enterprise risk, regulatory, and business objectives.
Experience leading cyber work management, operating rhythms, resource planning, budget oversight, financial tracking, and portfolio reporting across complex organizations.
Strong judgment, ownership, and executive presence, including the ability to drive alignment, resolve ambiguity, escalate decisions appropriately, and ensure follow-through on critical commitments.
Demonstrated ability to translate complex cybersecurity risks, priorities, and investments into executive-level communications, decision materials, metrics, and reporting.
Ability to lead cross-functional teams and influence senior stakeholders across cybersecurity, technology, finance, legal, audit, privacy, compliance, and business teams.

Technologies

NIST
ISO 27001
PCI DSS
SOX
SOC 2
CMMC
GDPR
CISM
CISSP
CRISC
CISA
CDPSE
PMP

Benefits

20+ Employee Business Resource Groups focused on connecting team members to customers, suppliers, communities, and shareholders and creating an inclusive work environment

Type: Full-time

Location: Fort Worth, TX (onsite)

View full job page →

Cybersecurity Governance Jobs

Director, Cybersecurity

Cybersecurity Business Resilience Principal

Sr. Manager, Cybersecurity Program Management

Sr Manager, IT Cybersecurity Governance, Risk & Compliance

Get Cybersecurity Governance Jobs alerts