Director, Information Security Governance

Responsibilities

• Lead the strategy and execution of the Information Security control and policy governance ecosystem.
• Own the operating model for the Information Security control library, including taxonomy, metadata, and quality gates.
• Manage the full lifecycle of Information Security policies, standards, and procedures from intake to retirement.
• Map security policies and standards to the control library to ensure end-to-end traceability.
• Develop detailed control narratives describing intent, design, operation, and evidence expectations.
• Partner with Risk, Compliance, and Audit teams to define reusable test procedures and automation opportunities.
• Improve how requirements are consumed by publishing plain-language guidance and audience-specific views for engineers and leaders.

Requirements

• Bachelor’s degree in Cybersecurity, Risk Management, Business, or a related field.
• Experience building or operating a control library or governance program in a regulated environment.
• Strong knowledge of information security frameworks such as NIST 800-53 or ISO 27001.
• Excellent technical writing and editing skills for producing durable governance artifacts.
• Proven ability to manage stakeholders across Legal, Compliance, Risk, and Technology teams.
• Strong program discipline with the ability to manage multiple concurrent priorities and drive closure.

Preferred Qualifications

• Experience with financial services regulatory frameworks (e.g., NYDFS 23 NYCRR 500, FFIEC, SOC 1/2).
• Experience using GRC tooling to improve policy governance and process standardization.
• Relevant industry certifications such as CISA, CISM, or CISSP.

Benefits

• Market competitive base salaries with yearly bonus potential.
• Comprehensive medical, dental, vision, and life insurance.
• 401(k) plan with company match up to 4% and a company-funded pension plan.
• Wellness programs with annual reimbursement for personal wellbeing needs.
• Education benefits to support degree attainment and accredited certificate programs.
• Employee Stock Purchase Plan.

About the Company

Prudential Financial, Inc. is a global financial services leader and premier active global investment manager. With a history spanning 150 years, Prudential helps people expand access to investing, insurance, and retirement security.