Hi,
Our client is seeking a manager – Cybersecurity, Data Security & Governance for a Contract Role. If interested share your updated resume in word format. Thank you
Duration: 6 Months (Possibility Extension)
Location: Atlanta, GA
Work Model: Onsite
Job Description
Manager – Cybersecurity, Data Security & Governance (Insurance Industry)
Position Summary
The Manager, Cybersecurity, Data Security & Governance is responsible for leading cybersecurity, data protection, governance, risk, and compliance initiatives across the organization. This role ensures the confidentiality, integrity, and availability of enterprise systems and sensitive insurance data while supporting regulatory compliance, audit readiness, and business risk management.
The manager will work closely with technology, security, legal, compliance, internal audit, and business stakeholders to establish and maintain a robust security and governance framework that aligns with business objectives and regulatory requirements.
Key Responsibilities
Cybersecurity & Information Security Management
- Lead the implementation and continuous improvement of cybersecurity programs and controls.
- Develop and maintain security policies, standards, procedures, and governance frameworks.
- Conduct security risk assessments and recommend mitigation strategies.
- Partner with IT teams to ensure secure application development, infrastructure, and cloud deployments.
- Drive vulnerability management, penetration testing, and security remediation efforts.
- Manage incident response, cyber resilience, and business continuity planning activities.
Data Security & Privacy
- Lead enterprise data protection initiatives.
- Implement and maintain Data Loss Prevention (DLP) controls.
- Oversee data classification, encryption, retention, and secure disposal practices.
- Ensure the protection of Personally Identifiable Information (PII), policyholder data, financial information, and other sensitive business data.
- Support privacy and data protection requirements across business operations.
Governance, Risk & Compliance (GRC)
- Manage enterprise cybersecurity governance activities.
- Maintain security risk registers and compliance tracking mechanisms.
- Ensure compliance with industry frameworks and regulatory requirements.
- Coordinate internal and external audits and remediation activities.
- Monitor control effectiveness and provide regular reporting to leadership teams.
Insurance Regulatory & Audit Compliance
- Support compliance with insurance industry regulations and audit requirements.
- Lead preparation and execution of:
- SOC 1 / SOC 2 Audits
- NAIC Model Laws
- State Insurance Regulatory Requirements
- PCI-DSS
- SOX Controls
- ISO 27001
- NIST Cybersecurity Framework
- GDPR and applicable Privacy Regulations
- Cyber Insurance Security Requirements
- Coordinate with internal audit, external auditors, regulators, and compliance teams.
- Ensure timely remediation of audit observations and compliance findings.
Third-Party Risk Management
- Perform cybersecurity assessments for vendors and third-party service providers.
- Evaluate risks associated with outsourcing, cloud platforms, and business partners.
- Monitor vendor compliance with contractual security obligations.
- Support procurement teams in security due diligence activities.
Security Operations & Monitoring
- Oversee ongoing security monitoring and threat detection activities.
- Partner with security operations teams to investigate and respond to incidents.
- Review security metrics, KPI dashboards, and operational risk indicators.
- Support implementation and optimization of SIEM, endpoint security, and threat intelligence platforms.
Program & Stakeholder Management
- Provide security updates and risk reporting to senior leadership.
- Develop roadmaps and plans to improve organizational security maturity.
- Manage project budgets, resource planning, and vendor relationships.
- Mentor and guide junior security and governance professionals.
Required Qualifications
Education
- Cybersecurity
- Computer Science
- Information Systems
- Information Security
- Engineering
- Related Field
Experience
- 8+ years of experience in Cybersecurity, Information Security, Risk Management, or Governance.
- 3+ years of leadership or people management experience.
- Experience supporting insurance, financial services, or highly regulated industries.
- Experience managing security audits and compliance programs.
- Strong understanding of cloud security, data protection, and governance frameworks.
- Experience working with executive leadership and auditors.
Preferred Certifications
Cybersecurity
Governance & Compliance
- ISO 27001 Lead Auditor
- ISO 27001 Lead Implementer
- CDPSE
- Certified Risk Management Professional
Cloud Security
- Microsoft Certified: Azure Security Engineer Associate
- Azure Solutions Architect Expert
- AWS Security Specialty
Required Skills
Technical Skills
- Cybersecurity Frameworks (NIST, ISO 27001)
- Security Risk Management
- Data Security & Privacy
- Identity & Access Management (IAM)
- Zero Trust Architecture
- Cloud Security (Azure, AWS)
- Data Loss Prevention (DLP)
- Vulnerability Management
- Security Incident Response
- SIEM & Security Monitoring
Leadership Skills
- Strategic Planning
- Audit & Compliance Management
- Executive Communication
- Vendor Management
- Risk Assessment & Mitigation
- Team Leadership
We are an Equal Opportunity Employer
