Information Security Manager 3 (70126089)

LMG Technology Services • Austin, TX

19h • Remote

About The Position

This role focuses on defining and establishing end-to-end governance workflows for risk management within the organization. The Information Security Manager will be responsible for creating a robust framework for risk identification, review, acceptance, mitigation, transfer, and ongoing monitoring. This includes establishing clear roles and responsibilities, designing escalation and reporting processes, and engaging with key stakeholders across various departments. The position also involves supporting the initial population of the enterprise risk register and producing comprehensive, audit-ready documentation. Knowledge transfer to designated security staff is crucial for ensuring the sustainability of these processes beyond the contract term.

Requirements

• 8 Years Required Experience with Risk Register Design and Framework
• 8 Years Required Experience with Risk Scoring and Prioritization Model
• 8 Years Required Experience with Governance Processes and Workflows
• 8 Years Required Experience with Stakeholder and Enablement
• 8 Years Required Demonstrated skill with documentation and knowledge transfer

Responsibilities

• Define end to end governance workflows for risk identification and intake, risk review and validation, risk acceptance, mitigation, or transfer, and ongoing monitoring and periodic reassessment.
• Establish roles and responsibilities for risk owners, reviewers, and governance bodies.
• Design escalation and reporting processes for high risk and accepted risks.
• Engage key stakeholders across business, technology, security, and governance functions to validate risk requirements and workflows.
• Facilitate working sessions or workshops to socialize the risk register and governance processes.
• Support onboarding of initial risks into the enterprise risk register.
• Produce clear, audit ready documentation covering risk register structure and data definitions, risk scoring methodology, and governance workflows and decision authorities.
• Provide knowledge transfer to designated security staff to ensure sustainability beyond the contract term.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed
• Number of Employees: 1-10 employees