Manages enterprise information security governance, risk, and compliance initiatives. Develops security policies and frameworks, leads data classification and threat modeling, conducts risk assessments, oversees vulnerability remediation, evaluates security controls, supports audits, and prepares risk metrics and executive reports. Partners with technical teams to embed security requirements and promotes governance best practices across the organization.
Information Security Governance Specialist Experience
6-10 Years
Job TitleInformation Security Governance Specialist
Job SummaryWe are seeking an experienced Information Security Governance Specialist to drive and manage enterprise information security governance, risk, and compliance initiatives. The ideal candidate will possess strong expertise in data classification, threat modeling, security controls, vulnerability management, risk assessment, and audit readiness.
This role is responsible for ensuring that security policies, standards, and controls are effectively designed, implemented, monitored, and governed to protect organizational assets while meeting regulatory and compliance requirements.
Key Responsibilities- Develop, implement, and maintain information security governance frameworks, policies, standards, and procedures.
- Lead enterprise-wide data classification and data protection initiatives.
- Conduct threat modeling exercises to identify risks and recommend security controls during system and application design.
- Perform security risk assessments and maintain risk registers for technology and business processes.
- Coordinate vulnerability management activities, including identification, remediation tracking, and reporting.
- Collect, review, and maintain security control evidence to support audits, compliance assessments, and regulatory requirements.
- Evaluate the effectiveness of security controls and recommend improvements to strengthen the security posture.
- Work closely with infrastructure, application, cloud, and platform teams to ensure security requirements are embedded in solutions.
- Facilitate risk mitigation planning and monitor remediation activities.
- Support internal and external audits, compliance reviews, and security assessments.
- Monitor emerging threats, vulnerabilities, and industry best practices to improve governance processes.
- Prepare security dashboards, metrics, and executive-level risk reports.
- Promote security awareness and governance best practices across the organization.
- Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field.
- 6-10 years of experience in Information Security Governance, Risk Management, Compliance, or Cybersecurity.
- Strong knowledge of information security principles, frameworks, and governance practices.
- Hands-on experience conducting risk assessments and threat modeling exercises.
- Experience implementing and managing data classification programs.
- Knowledge of security controls and control testing methodologies.
- Experience managing vulnerability assessment and remediation processes.
- Strong understanding of compliance and regulatory requirements.
- Excellent analytical, documentation, and communication skills.
- Ability to present risks and recommendations to technical and non-technical stakeholders.
Compensation, Benefits and Duration
Minimum Compensation: USD 37,000
Maximum Compensation: USD 132,000
Compensation is based on actual experience and qualifications of the candidate. The above is a reasonable and a good faith estimate for the role.
Medical, vision, and dental benefits, 401k retirement plan, variable pay/incentives, paid time off, and paid holidays are available for full-time employees.
This position is not available for independent contractors
No applications will be considered if received more than 120 days after the date of this post
Minimum Compensation: USD 37,000
Maximum Compensation: USD 132,000
Compensation is based on actual experience and qualifications of the candidate. The above is a reasonable and a good faith estimate for the role.
Medical, vision, and dental benefits, 401k retirement plan, variable pay/incentives, paid time off, and paid holidays are available for full-time employees.
This position is not available for independent contractors
No applications will be considered if received more than 120 days after the date of this post
Photon Chicago, Illinois, USA Office
11 East Adams Street Suite 1100, Chicago, IL, United States, 60603
Similar Jobs
Machine Learning • Security • Software • Analytics • Defense
Develop and maintain enterprise software applications, integrations, APIs, automated workflows, data processing tools, and business applications. Collaborate with analytics, applications, IT, cybersecurity, and business stakeholders to gather requirements, improve processes, manage roadmaps, and support reliable software delivery. Use Python, AI-assisted development tools, containers, Git-based source control, CI/CD, Linux, and automated testing while troubleshooting and documenting existing systems.
Top Skills:
C++Ci/CdClaude CodeData WarehousesDockerEtl/EltGitGitlabJavaLinuxOpenai CodexPodmanPower BIPythonRagRelational DatabasesRest ApisSQL
Machine Learning • Security • Software • Analytics • Defense
Develop and maintain enterprise software applications, integrations, APIs, automated workflows, and data-processing tools. Collaborate with business, IT, and cybersecurity stakeholders to translate operational needs into technical solutions. Manage roadmaps and backlogs, deploy containerized applications through CI/CD pipelines, troubleshoot existing systems, and improve reliability and automation. The role also supports enterprise reporting, data integration, business applications, and AI-assisted software development.
Top Skills:
C++Ci/CdClaude CodeDockerEtl/EltGitGitlabJavaLinuxLlmsOpenai CodexPodmanPower BIPythonRagRest ApisSQL
Information Technology • Security • Cybersecurity
Build specialized technical talent pipelines through market mapping, competitor analysis, targeted sourcing, passive candidate engagement, and long-term relationship building. Provide stakeholders with compensation, scarcity, and talent availability intelligence; manage multiple complex searches; analyze funnel metrics; and partner with recruiters and hiring managers to define searchable candidate profiles. The role also involves developing sourcing processes and using AI-enabled research and recruiting tools.
Top Skills:
AICybersecurityOt/IcsXot
What you need to know about the Chicago Tech Scene
With vibrant neighborhoods, great food and more affordable housing than either coast, Chicago might be the most liveable major tech hub. It is the birthplace of modern commodities and futures trading, a national hub for logistics and commerce, and home to the American Medical Association and the American Bar Association. This diverse blend of industry influences has helped Chicago emerge as a major player in verticals like fintech, biotechnology, legal tech, e-commerce and logistics technology. It’s also a major hiring center for tech companies on both coasts.
Key Facts About Chicago Tech
- Number of Tech Workers: 245,800; 5.2% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: McDonald’s, John Deere, Boeing, Morningstar
- Key Industries: Artificial intelligence, biotechnology, fintech, software, logistics technology
- Funding Landscape: $2.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Pritzker Group Venture Capital, Arch Venture Partners, MATH Venture Partners, Jump Capital, Hyde Park Venture Partners
- Research Centers and Universities: Northwestern University, University of Chicago, University of Illinois Urbana-Champaign, Illinois Institute of Technology, Argonne National Laboratory, Fermi National Accelerator Laboratory
