Head of Cybersecurity, Data Security & Governance(Insurance Industry) Atlanta, Georgia(Onsite)
Contract W2
Contract Independent
Contract Corp To Corp
18 Months
No Travel Required
On-site
Depends on Experience
Verito Solutions
Fitment
Dice Job Match Score™
🔢 Crunching numbers...
Job Details
Skills
- GDPR & Data Privacy Security Risk Assessment Risk Register Management Data Security & Protection Data Loss Prevention (DLP) Data Classification & Encryption Identity & Access Management (IAM) Privileged Access Management (PAM) Zero Trust Architecture Cloud Security (Azure / AWS) Vulnerability Management Penetration Testing Incident Response & Cyber Resilience SIEM & Security Monitoring Third-Party Risk Management (TPRM) Security Audits & Remediation Business Continuity & Disaster Recovery (BCP/DR) Security Policies & Procedures Security Controls Assessment KPI / KRI Reporting Vendor Risk Management Executive Stakeholder Management Security Strategy & Roadmap Team Leadership & Project Management
Summary
Head of Cybersecurity, Data Security & Governance(Insurance/Banking Industry)
Atlanta, Georgia(Onsite)
Long-term Contract
Please prioritize candidates with:
- 8+ years of experience in cybersecurity, information security, risk management, or governance
- 3+ years of leadership or people management experience
- Strong cybersecurity, data security/privacy, GRC, risk management, compliance, and security transformation experience
- Experience within insurance, financial services, or another highly regulated industry
- Strong exposure to security audits and compliance programs, including SOC 1/SOC 2, ISO 27001, NIST, PCI-DSS, SOX, and GDPR
- Cloud security experience across Azure/AWS, along with DLP, IAM, vulnerability management, incident response, and SIEM/security monitoring
- Experience working with executive leadership, auditors, regulators, and cross-functional stakeholders
Preferred certifications include CISSP, CISM, CRISC, CCSP, ISO 27001, CDPSE, and relevant Azure/AWS security certifications.
Given the strategic nature of this position, we are looking for strong leadership experience in cybersecurity, data security, governance, risk management, compliance, and security transformation initiatives.
Please review the attached JD for the complete requirements and share suitable profiles for review.
Position Summary
The Manager, Cybersecurity, Data Security & Governance is responsible for leading
cybersecurity, data protection, governance, risk, and compliance initiatives across the
organization. This role ensures the confidentiality, integrity, and availability of enterprise
systems and sensitive insurance data while supporting regulatory compliance, audit
readiness, and business risk management.
The manager will work closely with technology, security, legal, compliance, internal
audit, and business stakeholders to establish and maintain a robust security and
governance framework that aligns with business objectives and regulatory
requirements.
The Manager, Cybersecurity, Data Security & Governance is responsible for leading
cybersecurity, data protection, governance, risk, and compliance initiatives across the
organization. This role ensures the confidentiality, integrity, and availability of enterprise
systems and sensitive insurance data while supporting regulatory compliance, audit
readiness, and business risk management.
The manager will work closely with technology, security, legal, compliance, internal
audit, and business stakeholders to establish and maintain a robust security and
governance framework that aligns with business objectives and regulatory
requirements.
Key Responsibilities
Cybersecurity & Information Security Management
Lead the implementation and continuous improvement of cybersecurity programs
and controls.
Develop and maintain security policies, standards, procedures, and governance
frameworks.
Conduct security risk assessments and recommend mitigation strategies.
Partner with IT teams to ensure secure application development, infrastructure,
and cloud deployments.
Drive vulnerability management, penetration testing, and security remediation
efforts.
Manage incident response, cyber resilience, and business continuity planning
activities.
Data Security & Privacy
Lead enterprise data protection initiatives.
Implement and maintain Data Loss Prevention (DLP) controls.
Oversee data classification, encryption, retention, and secure disposal practices.
Cybersecurity & Information Security Management
Lead the implementation and continuous improvement of cybersecurity programs
and controls.
Develop and maintain security policies, standards, procedures, and governance
frameworks.
Conduct security risk assessments and recommend mitigation strategies.
Partner with IT teams to ensure secure application development, infrastructure,
and cloud deployments.
Drive vulnerability management, penetration testing, and security remediation
efforts.
Manage incident response, cyber resilience, and business continuity planning
activities.
Data Security & Privacy
Lead enterprise data protection initiatives.
Implement and maintain Data Loss Prevention (DLP) controls.
Oversee data classification, encryption, retention, and secure disposal practices.
Ensure the protection of Personally Identifiable Information (PII), policyholder
data, financial information, and other sensitive business data.
Support privacy and data protection requirements across business operations.
Governance, Risk & Compliance (GRC)
Manage enterprise cybersecurity governance activities.
Maintain security risk registers and compliance tracking mechanisms.
Ensure compliance with industry frameworks and regulatory requirements.
Coordinate internal and external audits and remediation activities.
Monitor control effectiveness and provide regular reporting to leadership teams.
Insurance Regulatory & Audit Compliance
Support compliance with insurance industry regulations and audit requirements.
Lead preparation and execution of:
o SOC 1 / SOC 2 Audits
o NAIC Model Laws
o State Insurance Regulatory Requirements
o PCI-DSS
o SOX Controls
o ISO 27001
o NIST Cybersecurity Framework
o GDPR and applicable Privacy Regulations
o Cyber Insurance Security Requirements
Coordinate with internal audit, external auditors, regulators, and compliance
teams.
Ensure timely remediation of audit observations and compliance findings.
Third-Party Risk Management
Perform cybersecurity assessments for vendors and third-party service providers.
Evaluate risks associated with outsourcing, cloud platforms, and business
partners.
data, financial information, and other sensitive business data.
Support privacy and data protection requirements across business operations.
Governance, Risk & Compliance (GRC)
Manage enterprise cybersecurity governance activities.
Maintain security risk registers and compliance tracking mechanisms.
Ensure compliance with industry frameworks and regulatory requirements.
Coordinate internal and external audits and remediation activities.
Monitor control effectiveness and provide regular reporting to leadership teams.
Insurance Regulatory & Audit Compliance
Support compliance with insurance industry regulations and audit requirements.
Lead preparation and execution of:
o SOC 1 / SOC 2 Audits
o NAIC Model Laws
o State Insurance Regulatory Requirements
o PCI-DSS
o SOX Controls
o ISO 27001
o NIST Cybersecurity Framework
o GDPR and applicable Privacy Regulations
o Cyber Insurance Security Requirements
Coordinate with internal audit, external auditors, regulators, and compliance
teams.
Ensure timely remediation of audit observations and compliance findings.
Third-Party Risk Management
Perform cybersecurity assessments for vendors and third-party service providers.
Evaluate risks associated with outsourcing, cloud platforms, and business
partners.
Monitor vendor compliance with contractual security obligations.
Support procurement teams in security due diligence activities.
Security Operations & Monitoring
Oversee ongoing security monitoring and threat detection activities.
Partner with security operations teams to investigate and respond to incidents.
Review security metrics, KPI dashboards, and operational risk indicators.
Support implementation and optimization of SIEM, endpoint security, and threat
intelligence platforms.
Program & Stakeholder Management
Provide security updates and risk reporting to senior leadership.
Develop roadmaps and plans to improve organizational security maturity.
Manage project budgets, resource planning, and vendor relationships.
Mentor and guide junior security and governance professionals.
Support procurement teams in security due diligence activities.
Security Operations & Monitoring
Oversee ongoing security monitoring and threat detection activities.
Partner with security operations teams to investigate and respond to incidents.
Review security metrics, KPI dashboards, and operational risk indicators.
Support implementation and optimization of SIEM, endpoint security, and threat
intelligence platforms.
Program & Stakeholder Management
Provide security updates and risk reporting to senior leadership.
Develop roadmaps and plans to improve organizational security maturity.
Manage project budgets, resource planning, and vendor relationships.
Mentor and guide junior security and governance professionals.
Required Qualifications
Education
Bachelor's degree in:
o Cybersecurity
o Computer Science
o Information Systems
o Information Security
o Engineering
o Related Field
Education
Bachelor's degree in:
o Cybersecurity
o Computer Science
o Information Systems
o Information Security
o Engineering
o Related Field
Experience
8+ years of experience in Cybersecurity, Information Security, Risk Management,
or Governance.
8+ years of experience in Cybersecurity, Information Security, Risk Management,
or Governance.
3+ years of leadership or people management experience.
Experience supporting insurance, financial services, or highly regulated
industries.
Experience managing security audits and compliance programs.
Strong understanding of cloud security, data protection, and governance
frameworks.
Experience working with executive leadership and auditors.
Experience supporting insurance, financial services, or highly regulated
industries.
Experience managing security audits and compliance programs.
Strong understanding of cloud security, data protection, and governance
frameworks.
Experience working with executive leadership and auditors.
Preferred Certifications
Cybersecurity
CISSP
CISM
CRISC
CCSP
CEH
Governance & Compliance
ISO 27001 Lead Auditor
ISO 27001 Lead Implementer
CDPSE
Certified Risk Management Professional
Cloud Security
Microsoft Certified: Azure Security Engineer Associate
Azure Solutions Architect Expert
AWS Security Specialty
Cybersecurity
CISSP
CISM
CRISC
CCSP
CEH
Governance & Compliance
ISO 27001 Lead Auditor
ISO 27001 Lead Implementer
CDPSE
Certified Risk Management Professional
Cloud Security
Microsoft Certified: Azure Security Engineer Associate
Azure Solutions Architect Expert
AWS Security Specialty
Required Skills
Technical Skills
Cybersecurity Frameworks (NIST, ISO 27001)
Technical Skills
Cybersecurity Frameworks (NIST, ISO 27001)
Security Risk Management
Data Security & Privacy
Identity & Access Management (IAM)
Zero Trust Architecture
Cloud Security (Azure, AWS)
Data Loss Prevention (DLP)
Vulnerability Management
Security Incident Response
SIEM & Security Monitoring
Leadership Skills
Strategic Planning
Audit & Compliance Management
Executive Communication
Vendor Management
Risk Assessment & Mitigation
Team Leadership
Data Security & Privacy
Identity & Access Management (IAM)
Zero Trust Architecture
Cloud Security (Azure, AWS)
Data Loss Prevention (DLP)
Vulnerability Management
Security Incident Response
SIEM & Security Monitoring
Leadership Skills
Strategic Planning
Audit & Compliance Management
Executive Communication
Vendor Management
Risk Assessment & Mitigation
Team Leadership
Sayantan Das
Senior Tech Recruiter | Talent Acquisition | People & Culture
[ P: +1 ]
[ ]
LinkedIn: [ ]
[ Verito Solutions - An E-verified company]
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
- Dice Id: 91170457
- Position Id: 21177-40870-1792093909
- Posted 18 hours ago
Company Info
About Verito Solutions
At Verito Solutions, our core mission is to be an essential partner in our clients’ success. With a strong vision to become a global leader in delivering innovative and value-driven technology solutions, we are committed to exceeding expectations at every step. Our team is fueled by passion, expertise, and an unwavering determination to provide cutting-edge solutions tailored to the evolving needs of businesses.
We understand the challenges organizations face in today’s fast-paced digital landscape. That’s why we focus on delivering technology solutions that not only enhance efficiency but also save our clients valuable time, money, and effort. Whether it’s optimizing workflows, strengthening cybersecurity, or driving digital transformation, Verito Solutions is dedicated to empowering businesses with seamless, scalable, and future-ready technology.
Create job alert
Never miss an opportunity! Create an alert based on the job you applied for.