Information Security Policy Manager

Our client is seeking an Information Security Policy Manager to lead the development and continual improvement of information security policy across a global Governance, Risk, and Compliance (GRC) function. The ideal candidate is a strong writer and critical thinker who can translate complex technical and regulatory concepts into clear language for business audiences. This is a hybrid position based in Fairfield County, CT.

Information Security Policy Manager's Responsibilities And Duties

• Enhance and extend the information security policy library in alignment with regulations, risk appetite, and industry frameworks
• Conduct policy mapping and gap analysis to demonstrate compliance with cybersecurity frameworks, regulations, and laws
• Develop and map controls and testing procedures to drive and measure policy compliance
• Evaluate security controls and communicate recommendations for improvement
• Support external assessments, audits, and regulatory examinations with evidence of compliance
• Contribute to additional GRC initiatives as needed

Information Security Policy Manager's Qualifications And Skills

• At least 7 years of information or cybersecurity experience, including 3+ years managing security policy in a regulated industry and 3+ years in hands-on technical roles
• Strong understanding of cybersecurity regulations such as DORA, SEC, FFIEC, EBA, SFC, and MAS
• Working familiarity with security frameworks such as NIST CSF
• Proven ability to write clear, actionable policies grounded in risk management concepts
• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field, or equivalent experience
• GRC tooling experience, regulatory exam response experience, and CISM certification are a plus

RightClick is an equal opportunity employer who agrees not to discriminate against any employee or job applicant irrespective of race, color, creed, alienage, religion, sex, national origin, age, disability, gender (including gender identity), marital status, sexual orientation, citizenship or any other characteristic protected by law.