Executive Director, Information Security Governance, Risk & Compliance

The College Board • New York, NY

77d • $160,000 - $230,000 • Remote

About The Position

The Executive Director, Information Security, Governance, Risk and Compliance (ISGRC) at the College Board is responsible for managing a team of 10 employees and ensuring compliance with information security standards, reducing risk, and adding value. This role involves setting a strategic vision for the ISGRC team, driving team development, and engaging with various stakeholders across the organization. The ISGRC team works closely with other teams to assess and certify the security of College Board's information systems and processes, implement information security policies, and promote security awareness and training.

Requirements

• 10+ years of experience in security and/or general IT operational settings.
• 7-10 years of experience in security audit, compliance, and third-party risk management.
• Exceptional knowledge of InfoSec governance practices including risk, audit, policy and standard development.
• Experience with audits such as ISO27001, SOC2, PCI, or similar types of audits.
• Proven ability to set vision and direction, then manage others to meet aligned goals and metrics.
• Excellent verbal and written communication skills.
• Proven ability to collaborate, build relationships, and influence others to action.
• Ability to travel to Reston or New York office up to 3-4 times per quarter.
• Bachelor's degree required, and one or more current Information Security and/or Privacy certifications preferred.

Nice To Haves

• Knowledge of emerging trends and best practices in security-focused governance risk and compliance.
• Experience managing relationships with third-party resources and vendors.

Responsibilities

• Effectively manage, guide, and support ten team members to ensure they are engaged and working effectively towards accomplishing ISGRC and organizational goals.
• Set vision and priorities for the team, track and manage progress to goals, and provide coaching and support.
• Develop and maintain strong partnerships with leaders in Technology and various business units.
• Craft a compelling vision and strategic plan grounded in security-focused governance risk and compliance functions.
• Assess and enhance ISGRC's risk assessment and reporting, audit, compliance, policy, and security awareness activities.
• Manage technology-based systems that enhance information security assessments.
• Identify metrics and design reports to evaluate compliance and understand information security risk.
• Drive the advancement of AI risk management at College Board.
• Partner with stakeholder teams on disaster recovery and crisis management protocols.

Benefits

• Competitive compensation based on qualifications and experience.
• Supportive team environment.
• Comprehensive benefits package.

What This Job Offers

• Job Type: Full-time
• Career Level: Executive
• Industry: Educational Services
• Education Level: Bachelor's degree