Senior Cybersecurity Governance Specialist

Job Description

A financial client in the Cincinnati area is seeking a Senior Cybersecurity Governance Specialist to join their team in a direct hire capacity. This individual will be responsible for leading the team in providing strategic security leadership and assurance to business and IT teams for major corporate initiatives and information security projects. Develops the strategy in how Western & Southern Financial Group (W&SFG) performs risk assessments, security assessments, and policy reviews of WSFG systems and third-party vendors to identify areas of noncompliance with established information security standards and regulations. Manages the recommendations and coaches the team on mitigation strategies and countermeasures. Provides guidance to IT stakeholders in the evaluation, design or implementation of secure computing environments including vulnerability management. Works with Cybersecurity Risk Management team in driving improvements in the information security policy framework. Manages the development, review and monitoring of information security policies and procedures, and develops and communicates improvements. Identifies and defines overall security requirements for the proper operation and design of business and IT applications to ensure the protection of W&SFG systems and data. Leads the development of the organization's information security awareness program. Escalates when needed and updates Director on a regular basis.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [email protected] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy:

Skills and Requirements

• 7-10 years of relevant experience in cybersecurity, risk management, or technology governance.

• Direct experience with vulnerability management, including configuring and analyzing results from at least one major vulnerability scanning tool (Qualys, Tenable, or Rapid7).

• Demonstrated ability to analyze, consolidate, and report vulnerability and governance data, including experience using ServiceNow for risk tracking and stakeholder reporting.

• Strong understanding of application security and enterprise security frameworks, including OWASP Top 10, open web application security concepts, and familiarity with the NIST Cybersecurity Framework.