Principal Engineer I, Cyber - IT Security Governance Location: CityScape What you'll do: As a Principal IT Security Governance Engineer, you will serve as a senior individual contributor responsible ...
Principal Engineer I, Cyber - IT Security Governance Location: CityScape What you'll do: As a Principal IT Security Governance Engineer, you will serve as a senior individual contributor responsible ...
Principal Engineer I, Cyber - IT Security Governance Location: CityScape What you'll do: As a Principal IT Security Governance Engineer, you will serve as a senior individual contributor responsible ...
Principal Engineer I, Cyber - IT Security Governance Location: CityScape What you'll do: As a Principal IT Security Governance Engineer, you will serve as a senior individual contributor responsible ...
Demonstrates experience across Cyber Governance Risk, Compliance, Audit, Security Solution Architecture, Project management, as well as Configuration, Change, and Release Management. * Experience in ...
Quick apply
Demonstrates experience across Cyber Governance Risk, Compliance, Audit, Security Solution Architecture, Project management, as well as Configuration, Change, and Release Management. * Experience in ...
Vice President of Information Security & Infrastructure
Phoenix, AZ · Hybrid
$148K - $186K/yr
Serve as the executive leader responsible for cyber risk management, security governance, and enterprise security operations. * Provide executive and Board-level reporting on cybersecurity posture ...
Vice President of Information Security & Infrastructure
Phoenix, AZ · Hybrid
$148K - $186K/yr
Serve as the executive leader responsible for cyber risk management, security governance, and enterprise security operations. * Provide executive and Board-level reporting on cybersecurity posture ...
Dev Sec Ops Engineer TS/SCI
King Of Prussia, PA · On-site
$51.50 - $70.50/hr
Oversee cyber governance, risk, and compliance processes, policies, tools, and strategies to assess, identify, mitigate, and validate cyber risk across the organization or program. Why join us: Your ...
Dev Sec Ops Engineer TS/SCI
King Of Prussia, PA · On-site
$51.50 - $70.50/hr
Oversee cyber governance, risk, and compliance processes, policies, tools, and strategies to assess, identify, mitigate, and validate cyber risk across the organization or program. Why join us: Your ...
Vice President of Information Security & Infrastructure
Broomfield, CO · On-site +1
$157K - $197K/yr
Serve as the executive leader responsible for cyber risk management, security governance, and enterprise security operations. * Provide executive and Board-level reporting on cybersecurity posture ...
Vice President of Information Security & Infrastructure
Broomfield, CO · On-site +1
$157K - $197K/yr
Serve as the executive leader responsible for cyber risk management, security governance, and enterprise security operations. * Provide executive and Board-level reporting on cybersecurity posture ...
Vice President of Information Security & Infrastructure
Broomfield, CO · Hybrid
$158K - $198K/yr
Serve as the executive leader responsible for cyber risk management, security governance, and enterprise security operations. * Provide executive and Board-level reporting on cybersecurity posture ...
Vice President of Information Security & Infrastructure
Broomfield, CO · Hybrid
$158K - $198K/yr
Serve as the executive leader responsible for cyber risk management, security governance, and enterprise security operations. * Provide executive and Board-level reporting on cybersecurity posture ...
Dev Sec Ops Engineer TS/SCI
King Of Prussia, PA · On-site
$51.50 - $70.50/hr
Oversee cyber governance, risk, and compliance processes, policies, tools, and strategies to assess, identify, mitigate, and validate cyber risk across the organization or program. Why join us: Your ...
Dev Sec Ops Engineer TS/SCI
King Of Prussia, PA · On-site
$51.50 - $70.50/hr
Oversee cyber governance, risk, and compliance processes, policies, tools, and strategies to assess, identify, mitigate, and validate cyber risk across the organization or program. Why join us: Your ...
SME III Technology Capabilities (Cybersecurity SME)
Washington, DC · On-site
$113K - $146K/yr
Cyber governance, policy enforcement, and compliance * Senior cyber advisor to PMO, AO, ISSM/ISSO * Leadership of cybersecurity engineers/analysts #dsa209 #LI-JE1
SME III Technology Capabilities (Cybersecurity SME)
Washington, DC · On-site
$113K - $146K/yr
Cyber governance, policy enforcement, and compliance * Senior cyber advisor to PMO, AO, ISSM/ISSO * Leadership of cybersecurity engineers/analysts #dsa209 #LI-JE1
Systems Security Architect- Owego, NY - Advanced
Owego, NY · On-site
$60.75 - $78.50/hr
Knowledgeable of cyber-governance frameworks (RMF, LO/CLO) and able to mentor junior engineers. Experience conducting threat modeling and risk assessments for classified hardware platforms. EEO ...
Systems Security Architect- Owego, NY - Advanced
Owego, NY · On-site
$60.75 - $78.50/hr
Knowledgeable of cyber-governance frameworks (RMF, LO/CLO) and able to mentor junior engineers. Experience conducting threat modeling and risk assessments for classified hardware platforms. EEO ...
Sr. Director IT Cyber Security
$100K - $135K/yr
Establish a unified cyber governance framework encompassing policies, standards, risk assessments, compliance, and regulatory alignment (e.g., SOX, NIST CSF, ISO 27001, CIS Controls). * Drive ...
Quick apply
Sr. Director IT Cyber Security
$100K - $135K/yr
Establish a unified cyber governance framework encompassing policies, standards, risk assessments, compliance, and regulatory alignment (e.g., SOX, NIST CSF, ISO 27001, CIS Controls). * Drive ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Developing AI-enabled capabilities that accelerate governance, risk, and compliance and cyber operations, including evidence summarization, control testing assist, policy question-and-answer ...
Cyber Governance information
See salary details
$46.5K - $59.4K
2% of jobs
$59.4K - $72.3K
0% of jobs
$72.3K - $85.2K
2% of jobs
$85.2K - $98.1K
6% of jobs
$98.1K - $111K
6% of jobs
$115.5K is the 25th percentile. Wages below this are outliers.
$111K - $124K
24% of jobs
The median wage is $129.8K / yr.
$124K - $136.9K
21% of jobs
$145.3K is the 75th percentile. Wages above this are outliers.
$136.9K - $149.8K
21% of jobs
$149.8K - $162.7K
5% of jobs
$162.7K - $175.6K
6% of jobs
$175.6K - $188.5K
6% of jobs
$46.5K
$132.6K
$188.5K
How much do cyber governance jobs pay per year?
What is cyber governance?
What is the difference between Cyber Governance vs Cyber Security Analyst?
| Aspect | Cyber Governance | Cyber Security Analyst |
|---|---|---|
| Primary Focus | Establishing policies, frameworks, and oversight for cybersecurity | Implementing security measures, monitoring threats, and responding to incidents |
| Required Credentials | Certifications like CISA, CISSP, CISM often preferred | Certifications like CompTIA Security+, CISSP, CEH common |
| Work Environment | Policy development, compliance audits, executive collaboration | Technical analysis, threat detection, incident response |
| Employer & Industry Usage | Used by organizations to ensure cybersecurity compliance and governance | Used by security teams to protect systems and respond to threats |
Cyber Governance focuses on creating and maintaining cybersecurity policies and ensuring compliance, while Cyber Security Analysts are hands-on professionals who implement security measures and respond to security incidents. Both roles are essential but differ in scope and daily responsibilities.
What are the main challenges faced by professionals in Cyber Governance roles, and how can they effectively address them?
What are the key skills and qualifications needed to thrive as a Cyber Governance professional, and why are they important?

Full-time
Medical, Dental, Retirement
Posted 8 days ago
Job description
Job Title:
Principal Engineer I, Cyber - IT Security GovernanceLocation:
CityScapeWhat you'll do:
As a Principal IT Security Governance Engineer, you will serve as a senior individual contributor responsible for leading and advancing the organization's cybersecurity governance, risk management, and maturity initiatives. This role combines deep expertise in cyber risk, control design, CRI Profile maturity, and policy management with a strong understanding of modern engineering practices, data, automation, and AI-driven capabilities.You will drive complex, cross-functional initiatives that embed secure, compliant, and scalable practices into technology, data, and AI solutions, ensuring alignment with enterprise risk management objectives and regulatory expectations. This includes designing and implementing governance frameworks, control structures, and engineering-enabled solutions that enhance the effectiveness, consistency, and automation of risk assessments, RCSAs, and control monitoring.
In this role, you will act as both a governance and technical authority, partnering closely with engineering, data, and risk teams to translate evolving technologies into defensible, regulator-ready processes, controls, and documentation. You will leverage data, automation, and AI to improve visibility into risk posture, drive operational efficiency, and enable sustained improvements in cybersecurity maturity and program scalability.
- Own and lead cybersecurity governance initiatives spanning risk identification, control design, policy management, and maturity improvement.
- Serve as a subjectmatter expert for cyber risk management, providing guidance on control effectiveness, risk treatment, and residual risk decisions.
- Drive execution of cybersecurity Risk & Control SelfAssessments (RCSAs), ensuring alignment to ERM standards and regulatory expectations.
- Own and manage CRI Profile assessments, maturity scoring, evidence standards, and remediation tracking. Partner with technology, security, and risk teams to drive improved and sustained maturity gains.
- Maintain traceability between risks, controls, assessment results, and remediation activities.
- Lead the development, maintenance, and rationalization of cybersecurity policies, standards, and procedures in alignment with industry best practices (e.g., GLBA, FFIEC, NIST).
- Design, document, and maintain cyber risk statements, control descriptions, and control narratives suitable for audits and regulatory exams.
- Support internal audits, regulatory exams, and second line credible challenge through structured responses, evidence packaging, and issue management.
- Track and report on control performance, risk posture, and remediation progress using defined metrics and governance forums.
- Manage complex projects requiring coordination across IT, Information Security, ERM, Privacy, and Audit.
- Act as a trusted advisor to senior leaders on risk posture, maturity trends, and program health.
- Produce clear, executiveready artifacts including risk summaries, maturity dashboards, remediation roadmaps, and briefing materials.
- Develop and maintain automation solutions (e.g., scripting, workflow tools, AI-assisted processes) to improve efficiency of risk assessments, control testing, and evidence collection.
- Enable data-driven insights and reporting through engineering-oriented solutions (e.g., dashboards, metrics automation, control monitoring).
- Drive integration of AI and automation into RCSA, CRI assessments, and risk reporting processes to improve scalability, consistency, and accuracy.
What you'll need:
- 8+ years of related experience in Cybersecurity, Information Security Governance, IT Risk, or Enterprise Risk Management.
- Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Risk Management, or a related field. Masters or MBA in related field preferred.
- Advanced to expert experience with:
- Cyber Risk Management frameworks (NIST CSF, CRI Profile, FFIEC, ISO 27001 principles).
- RCSAs, risk identification, control design, and residual risk assessment.
- Policy, standard, and procedure lifecycle management.
- Regulatory and audit engagement support in a financial services environment.
- Strong ability to translate complex technical and regulatory concepts into clear, defensible documentation.
- Proven experience managing cross functional initiatives with competing priorities.
- Expert speaking and writing communication skills.
- Demonstrated experience leveraging or governing AI/ML, automation, or advanced analytics within cybersecurity, risk, or compliance domains preferred.
- Strong understanding of data architectures, data flows, and system integrations, with the ability to assess associated cyber and privacy risks preferred.
- Familiarity with emerging regulatory expectations related to AI, model risk, and data usage in financial services preferred.
- Working knowledge of software engineering or scripting practices (e.g., Python, PowerShell, automation workflows) to support scalable governance solutions preferred.
- Strong analytical mindset with the ability to use data and automation to enhance risk identification, monitoring, and reporting preferred.
- Relevant industry certifications (e.g., CISA, CRISC, CISSP, CISM, CGEIT, ITIL) preferred.
Benefits you'll love:
We offer all the important things you'd want - like competitive salaries, an ownership stake in the company, medical and dental insurance, time off, a great 401k matching program, tuition assistance program, an employee volunteer program, and a wellness program. In addition, you'll have the opportunity to bolster your business knowledge, learning the ins and outs of how successful companies operate and manage their finances, giving you invaluable hands-on experience to help grow your career!
About the company:
Western Alliance Bank, Member FDIC, is a wholly owned subsidiary of Western Alliance Bancorporation. Serving clients nationwide, Western Alliance Bank includes six legacy bank brands - Alliance Association Bank, Alliance Bank of Arizona, Bank of Nevada, Bridge Bank, First Independent Bank and Torrey Pines Bank - that remain part of the company's heritage, as well as AmeriHome Mortgage, a Western Alliance Bank Company.
Western Alliance Bancorporation is committed to equal employment and will consider all qualified applicants without regard to race, sex, color, religion, age, nation origin, marital status, disability, protected veteran status, sexual orientation, gender identity or genetic information. Western Alliance Bancorporation is committed to working with and providing reasonable accommodations for individuals with disabilities. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process and/or need an alternative method of applying, please email HR@westernalliancebank.com or call 602-386-2488. When contacting us, please provide your contact information and state the nature of your accessibility issue. We will only respond to inquiries concerning requests that involve a reasonable accommodation in the application process.
Western Alliance Bancorporation