Job Description Insight Global is seeking an Information Security Assurance Services Manager for one of our financial services customers to lead and mature its information security assurance programs across controls, audit and regulatory compliance, policy governance, PCI DSS, third-party risk management, and security awareness. This leader will assess existing programs and processes, identify opportunities for improvement, establish strategic roadmaps, and drive execution to create scalable, effective, and sustainable assurance capabilities.

This role combines strategic program leadership, people leadership, and hands-on subject matter expertise. The Manager will lead and develop a team of information security assurance professionals while remaining closely connected to the work. This individual will partner across business, technology, audit, risk, and regulatory stakeholders to strengthen controls, improve program maturity, and ensure assurance activities remain aligned with organizational and regulatory requirements.

A critical component of the role is people leadership and talent development. The ideal candidate will have experience leading teams with varying levels of experience and expertise, establishing clear expectations and accountability, and providing meaningful coaching and feedback. They should bring a confident and adaptable leadership style, sound judgment, and the ability to build trust and drive results in a complex environment.

The ideal candidate will also bring strong experience across information security controls, audit and regulatory compliance, policy governance, and PCI DSS, with a demonstrated ability to build or materially mature GRC and assurance programs. Experience across third-party risk management and security awareness is also valuable given the breadth of the assurance organization.

This leader will play an important role in advancing process maturity, standardization, automation, and operational efficiency across the assurance portfolio. Success will require someone who can evaluate existing processes, identify opportunities for improvement, translate priorities into actionable roadmaps, and drive sustainable change. Skills and Requirements

• 10+ years of progressive experience across information security GRC, cybersecurity assurance, technology risk, controls, internal/external audit, or related disciplines, including experience building, owning, or materially maturing GRC and assurance programs
• 5+ years of direct people leadership experience with a proven ability to coach and develop talent, manage performance, establish accountability, and build high-performing teams. Player-coach leadership experience qualifies
• Strong hands-on experience across information security controls, audit/regulatory compliance, and policy governance, including designing, testing, and remediating ITGCs and application controls
• Demonstrated PCI DSS experience, including scoping, control design/testing, remediation, evidence management, assessment readiness, and QSA/ISA interaction
• Broad information security assurance experience, including exposure to TPRM and/or security awareness programs
• Strong knowledge of security governance and control frameworks, including

NIST CSF, CIS

Controls, PCI

DSS, NYDFS

Part 500, or comparable frameworks

• Proven ability to assess GRC/assurance programs, identify gaps, develop roadmaps, and drive program maturity and operational improvement
• Ability to operate as a hands-on leader, balancing team leadership with reviewing and contributing to key deliverables when needed
• Strong executive presence, communication, and decision-making skills, with the ability to independently own decisions, respectfully challenge existing approaches, and effectively communicate complex risk and control topics to senior leaders, auditors, regulators, and cross-functional stakeholders
• Bachelor's degree in Information Security, Computer Science, Information Systems, a related discipline, or equivalent professional experience
• Ability and willingness to travel up to 10% based on business needs
• Experience with ServiceNow IRM or a comparable GRC platform, such as Archer, AuditBoard, OneTrust, MetricStream, or custom-built solutions
• Experience driving GRC process improvement and automation, including improving control testing, evidence collection, standardization, and operational efficiency
• Experience within a Product Operating Model or similar environment, including roadmap planning, backlog management, sprint-based delivery, and metrics-driven execution
• Experience within financial services, banking, or another highly regulated industry, including exposure to regulatory examinations
• Relevant industry certifications such as CISSP, CISA, CISM, CRISC, CGEIT, or CIA.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to HR@insightglobal.com.