$ cat jobs/senior-director-governance-and-risk-college-board-26c762566069.json
Senior Director, Governance and Risk
Senior Director Governance and Risk College Board – Risk Management Location: This is a remote role. Candidates who live near CB offices have theoptionof being fully remote or hybrid (Tuesday and Wednesday in office). All CB employeesare required tooccasionally travel to meet in person for business purposes. Role Type :This is a full-time position About the Team The Information Security Governance Risk and Compliance (ISGRC) team at the College Board works closely with other teams across the organization to assess and certify the security of College Board’s information systems and processes. This dedicated team facilitates information security governance and compliance by assessing College Board ’s vendors, reviewing and negotiating contractual commitments to information security, planning for disaster response and recovery, testing system strength using industry-recognized frameworks (ISO 27001, PCI-DSS and SOC2) and obtaining related compliance certifications, implementing information security policies, promoting security awareness and training, and testing the acumen of College Board employees through robust and innovative training and phishing campaigns. About the Opportunity As the Senior Director, Information Security Governance & Risk, you will operationalize the vision set in collaboration with other Senior Team members and approved by Executive Leadership. The Senior Director will oversee delivery across Security Policy, Security Awareness, Business Continuity, Vendor Risk Management, and the Information Security Risk Register. Your role is to ensure execution of Governance and Risk functions through a team of practitioners. You will work closely with stakeholders from Legal, Procurement, Information Security Office, Privacy, and Business Stakeholders. In this role, you will: Manage Governance and Risk (50%) Security Policy & Governance Operations Ensure policies and standards aremaintained, updated, and operationalized by the organization. Oversee policy c