Manages enterprise information security governance, risk, and compliance initiatives. Develops security policies and frameworks, leads data classification and threat modeling, conducts risk assessments, oversees vulnerability remediation, evaluates security controls, supports audits, and prepares risk metrics and executive reports. Partners with technical teams to embed security requirements and promotes governance best practices across the organization.
Information Security Governance Specialist Experience
6-10 Years
Job TitleInformation Security Governance Specialist
Job SummaryWe are seeking an experienced Information Security Governance Specialist to drive and manage enterprise information security governance, risk, and compliance initiatives. The ideal candidate will possess strong expertise in data classification, threat modeling, security controls, vulnerability management, risk assessment, and audit readiness.
This role is responsible for ensuring that security policies, standards, and controls are effectively designed, implemented, monitored, and governed to protect organizational assets while meeting regulatory and compliance requirements.
Key Responsibilities- Develop, implement, and maintain information security governance frameworks, policies, standards, and procedures.
- Lead enterprise-wide data classification and data protection initiatives.
- Conduct threat modeling exercises to identify risks and recommend security controls during system and application design.
- Perform security risk assessments and maintain risk registers for technology and business processes.
- Coordinate vulnerability management activities, including identification, remediation tracking, and reporting.
- Collect, review, and maintain security control evidence to support audits, compliance assessments, and regulatory requirements.
- Evaluate the effectiveness of security controls and recommend improvements to strengthen the security posture.
- Work closely with infrastructure, application, cloud, and platform teams to ensure security requirements are embedded in solutions.
- Facilitate risk mitigation planning and monitor remediation activities.
- Support internal and external audits, compliance reviews, and security assessments.
- Monitor emerging threats, vulnerabilities, and industry best practices to improve governance processes.
- Prepare security dashboards, metrics, and executive-level risk reports.
- Promote security awareness and governance best practices across the organization.
- Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field.
- 6-10 years of experience in Information Security Governance, Risk Management, Compliance, or Cybersecurity.
- Strong knowledge of information security principles, frameworks, and governance practices.
- Hands-on experience conducting risk assessments and threat modeling exercises.
- Experience implementing and managing data classification programs.
- Knowledge of security controls and control testing methodologies.
- Experience managing vulnerability assessment and remediation processes.
- Strong understanding of compliance and regulatory requirements.
- Excellent analytical, documentation, and communication skills.
- Ability to present risks and recommendations to technical and non-technical stakeholders.
Compensation, Benefits and Duration
Minimum Compensation: USD 37,000
Maximum Compensation: USD 132,000
Compensation is based on actual experience and qualifications of the candidate. The above is a reasonable and a good faith estimate for the role.
Medical, vision, and dental benefits, 401k retirement plan, variable pay/incentives, paid time off, and paid holidays are available for full-time employees.
This position is not available for independent contractors
No applications will be considered if received more than 120 days after the date of this post
Minimum Compensation: USD 37,000
Maximum Compensation: USD 132,000
Compensation is based on actual experience and qualifications of the candidate. The above is a reasonable and a good faith estimate for the role.
Medical, vision, and dental benefits, 401k retirement plan, variable pay/incentives, paid time off, and paid holidays are available for full-time employees.
This position is not available for independent contractors
No applications will be considered if received more than 120 days after the date of this post
Similar Jobs
Cloud • Information Technology • Security • Software • Cybersecurity
Lead design and delivery of scalable Sales Cloud and GTM systems. Translate GTM requirements into functional and technical designs, coordinate stakeholders, automate sales workflows with AI, and manage onshore/offshore teams to implement and optimize Salesforce and related GTM tools.
Top Skills:
AgentforceAi ToolsCRMPrmSales CloudSalesforceSalesforce Einstein
Healthtech
Build and maintain Customer Success and Implementation playbooks, SOPs, training programs, knowledge bases, presentation materials, and scalable workflows. Partner cross-functionally to communicate process and product changes, improve automation and efficiency, identify customer risks, and measure enablement effectiveness. Support implementation, launch readiness, customer health, escalations, business reviews, renewals, and expansion.
Top Skills:
NotionSalesforce
Artificial Intelligence • Cloud • Software • Infrastructure as a Service (IaaS)
Lead end-to-end LLM inference performance across serving systems, models, GPU hardware, and workloads. Define rigorous benchmarks, diagnose bottlenecks from scheduling through kernels and interconnects, optimize single- and multi-node deployments, and deliver production-ready runtimes and configurations. Collaborate with product and infrastructure teams, evaluate inference technologies, and implement runtime fixes. The role requires strong Python engineering, production experience with serving engines such as vLLM or SGLang, GPU profiling, and knowledge of modern inference optimization techniques.
Top Skills:
CudaDistributed ServingGpu ProfilingGpu SystemsHigh-Speed NetworkingPythonQuantizationSglangSpeculative DecodingTritonVllm
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
