Lead, Information Security - Endpoint, Mobile, Cloud

Prudential Financial•Newark, NJ

11h

About The Position

The Lead, Information Security Operations serves as a technical leader on the Mobile, Endpoint, and Cloud Security Infrastructure Security team within the Information Security Office. The role defines, governs, and advances security standards, policies, risk management practices, and strategic roadmaps across endpoint, mobile, and cloud technologies. It partners with security engineering, architecture, operations, infrastructure, cloud, and business stakeholders to strengthen the protection of company assets and data. The position evaluates complex security risks, determines control strategies, defines compensating controls, and influences enterprise decisions with risk-based recommendations. It provides functional leadership and guidance to team members, drives continuous improvement, matures governance processes, and promotes security best practices aligned with business objectives. The role calls for technical expertise, strategic thinking, business acumen, and the ability to communicate complex security topics to technical and non-technical audiences.

Requirements

Bachelor's degree in Computer Science, Information Systems, Computer Engineering, Cybersecurity, or equivalent professional experience.
Ability to work independently and use diverse perspectives across technical and business functions effectively.
Experience leading security governance, policy development, standards management, and/or strategic security initiatives.
Strong understanding of enterprise security frameworks, risk management methodologies, and compensating-control design.
Experience with Agile environments and continuous delivery models.
Knowledge of business concepts, processes, and information security tools needed to make sound decisions in the context of the company's business.
Adaptability and self-initiative to develop skills and knowledge on an ongoing basis.
Excellent analytical, communication, presentation, and collaboration skills.
Demonstrated ability to influence decisions through risk-based analysis and strategic recommendations.
Advanced experience and/or expertise with several of the following: NIST Cybersecurity Framework, NIST 800-series publications, and ISO 27000 standards; information security control standards, engineering specifications, and governance frameworks; mobile security governance, MDM, MAM, and mobile security controls; endpoint security technologies such as EDR/XDR, endpoint hardening, privileged access controls, and operating system security baselines; Azure, AWS, and hybrid cloud security governance; Microsoft Entra ID, identity governance, access management, and modern authentication controls; Zero Trust Architecture and Zero Trust Network Access; cloud security posture management, workload security, SaaS governance, and cloud risk management; security metrics, maturity assessments, governance reporting, and executive communications; international team collaboration and cross-functional workflow execution.

Nice To Haves

Certified Information Systems Security Professional (CISSP).
Cloud security certification such as AWS Security Specialty, Microsoft Azure Security Engineer, CCSK, CCSP, or equivalent.
GIAC Security Essentials (GSEC).
GIAC Cloud Security Essentials (GCLD).
Certified Cloud Security Professional (CCSP).
Certified Information Security Manager (CISM).
Experience working in highly regulated financial services or similar industries.

Responsibilities

Lead the development, maintenance, and governance of security standards, procedure documentation, engineering specifications, and policy requirements for endpoint, mobile, and cloud technologies.
Evaluate emerging technologies, architectures, and business initiatives for alignment with enterprise security requirements and risk tolerance.
Align strategic endpoint security, mobile device management, and cloud security posture management programs with identity modernization and Zero Trust adoption.
Lead governance reviews, risk assessments, exception evaluations, and compensating-control decisions for mobile, endpoint, and cloud technology solutions.
Partner with Security Advisors, Architecture, Engineering, Infrastructure, Cloud Operations, and Product teams to establish secure-by-design principles and consistent security controls.
Develop and maintain service documentation, governance artifacts, standards, implementation guides, security briefs, and stakeholder communications.
Drive continuous improvement through metrics, risk reporting and burndown, governance reviews, and procedure optimization.
Mentor and coach junior team members in governance processes, risk evaluation techniques, and strategic security thinking.
Collaborate with globally distributed teams to apply security standards and governance principles consistently across the enterprise.
Serve as a subject matter expert for audits, regulatory reviews, and strategic security initiatives related to the role.

Benefits

Market-competitive base salary with yearly bonus potential at every level.
Medical, dental, vision, life, and disability insurance.
Paid Time Off and leave of absences, including parental and military leave.
401(k) plan with company match up to 4%.
Company-funded pension plan.
Wellness programs, including up to $1,600 per year in reimbursement for eligible personal wellbeing purchases.
Work/Life Resources for parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health, and career development.
Education Benefit for approved traditional college enrollment and accredited certificate programs.
Employee Stock Purchase Plan, with shares available at 85% of the lower of the beginning or ending purchase-period price.
Eligibility to participate in a discretionary annual incentive program, subject to program rules and applicable performance factors.