ZipRecruiter

Log In

1

Information Security Governance Manager Jobs (NOW HIRING)

Presidio

Principal Consultant, Security Governance

The Ro le A Principal Security Governance Consultant is expected to have a deep level of expertise ... ISACA Certified Information Security Manager (CISM) * Certified ISO 27001 Lead Implementer * List B

Seaboard Foods

Information Security GRC Analyst

Merriam, KS · On-site

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

In this highly impactful role, you will be a key member of the IT team. The Information Security GRC Analyst manages and executes security governance, risk management, and compliance functions across ...

Boeing

Information Governance Manager

Mesa, AZ · On-site

$94K - $115K/yr

  • Medical

  • Life

  • Retirement

Information Governance Manager Company: The Boeing Company The Boeing Company is seeking an ... Security Clearance: This position does not require a Security Clearance. Visa Sponsorship: Employer ...

New

Boeing

Information Governance Manager

Oklahoma City, OK · On-site

$88K - $108K/yr

  • Medical

  • Life

  • Retirement

Information Governance Manager Company: The Boeing Company The Boeing Company is seeking an ... Security Clearance: This position does not require a Security Clearance. Visa Sponsorship: Employer ...

New

Jobtailor

Chief Information Security Officer

Manhattan, NY · On-site

$250 - $420/hr

Demonstrated expertise in information security governance, regulatory compliance, data privacy, and enterprise control frameworks. * Experience leading internal and external IT audits and managing ...

Socket.dev

Chief Information Security Officer

Austin, TX · On-site

$115 - $188/hr

  • Medical

  • Retirement

  • PTO

Additional responsibilities include cybersecurity strategy, governance, risk management, security ... Information Security Governance, Risk, and Compliance -- 25% Directs the development and ...

previous page

Showing results 41-60

All JobsInformation Security Governance JobsInformation Security Governance Manager Jobs

Information Security Governance Manager information

See salary details

$62.5K

$136.1K

$200K

How much do information security governance manager jobs pay per year?

As of Aug 13, 2026, the average yearly pay for information security governance manager in the United States is $136,104.00, according to ZipRecruiter salary data. Most workers in this role earn between $110,500.00 and $160,500.00 per year, depending on experience, location, and employer.

What does an information security governance manager do?

An Information Security Governance Manager is responsible for developing, implementing, and overseeing the policies, procedures, and frameworks that ensure an organization’s information assets are properly protected. They align information security strategies with business objectives, manage compliance with relevant laws and regulations, and coordinate risk management activities. This role often involves collaborating with various departments, leading audits, and reporting to senior management about the organization's security posture and areas for improvement.

What are the key skills and qualifications needed to thrive as an information security governance manager?

To thrive as an Information Security Governance Manager, you need a deep understanding of information security frameworks, risk management, compliance regulations, and typically a relevant degree or certifications such as CISSP, CISM, or CRISC. Familiarity with GRC (Governance, Risk, and Compliance) tools, audit management systems, and data protection technologies is essential. Outstanding analytical thinking, leadership, and effective communication are crucial soft skills for managing teams and influencing organizational policies. These skills and qualities ensure robust security postures, regulatory compliance, and effective risk mitigation strategies across the organization.

What are some common challenges faced by information security governance managers when implementing organization-wide security policies?

Information Security Governance Managers often encounter challenges such as gaining buy-in from various departments, balancing security requirements with business objectives, and ensuring consistent policy enforcement across all levels of the organization. They must communicate effectively with both technical and non-technical stakeholders to address concerns and promote security awareness. Additionally, keeping policies up-to-date with evolving regulations and emerging threats requires ongoing collaboration and adaptability.

What is the difference between Information Security Governance Manager vs Information Security Analyst?

AspectInformation Security Governance ManagerInformation Security Analyst
CertificationsCISSP, CISM, ISO 27001 Lead AuditorCISSP, CompTIA Security+, GIAC Security Essentials
Work EnvironmentStrategic, policy-focused, management teamsOperational, technical, security teams
Employer & Industry UsageOrganizations with formal security governance frameworksSecurity operations, incident response teams
Search & Comparison IntentUnderstanding governance roles and responsibilitiesTechnical security tasks and analysis

The main difference is that the Information Security Governance Manager focuses on establishing and maintaining security policies, compliance, and strategic oversight, while the Information Security Analyst handles technical security assessments, monitoring, and incident response. Both roles are essential but serve different functions within an organization's security framework.

What cities are hiring for Information Security Governance Manager jobs? Cities with the most Information Security Governance Manager job openings:
What are the most commonly searched types of Information Security Governance jobs? The most popular types of Information Security Governance jobs are:
What states have the most Information Security Governance Manager jobs? States with the most job openings for Information Security Governance Manager jobs include:
Information Security Governance Manager jobs near you
Infographic showing various Information Security Governance Manager job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 74% Full Time, 22% Part Time, and 3% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $136,104 per year, or $65.4 per hour.

Chief Information Security Officer (CISO)

Tract Capital

Denver, CO • On-site

Full-time

Medical, Dental, Vision, Retirement, PTO

Posted 28 days ago

Job description

Overview
Tract Capital adopts a unique approach to digital infrastructure investment. Leveraging experience and strategic insights honed over three decades of creating successful companies in the space, we excel in nurturing and advancing leading-edge digital infrastructure enterprises. Our team of specialized experts are united by a singular purpose: to support the growth of digital infrastructure. Tract Capital goes beyond simple investment by acting as a strategic partner and catalyst for innovation within the sector. We ensure our engagements not only generate strong financial results but also develop essential digital infrastructure to meet growing demands. Tract Capital has introduced two digital infrastructure strategies. The first is a horizontal, powered land strategy focused on creating master planned data center campuses called Tract. The second is the mega-campus vertical development strategy called Fleet Data Centers.
Position Overview
The Chief Information Security Officer (CISO) is a senior leadership role responsible for establishing, maturing, and governing the enterprise information security program across Tract Capital Management and each of its individual investment strategies (Tract and Fleet Data Centers). Reporting directly to the CITO, the CISO will own information security governance, compliance, risk management, and controls - ensuring that TCM's security posture satisfies the demands of institutional investors, hyperscale customers, regulatory bodies, and internal fiduciary obligations.
This is a hands-on leadership position that requires deep expertise in building information security programs within complex, multi-entity investment structures. The CISO will work across corporate IT, operational technology (OT) environments, and third-party ecosystems to deliver a unified governance model that scales with TCM's rapid growth.
Job Responsibilities
The candidate will have experience and practical expertise in the following:
Information Security Governance
  • Design and lead TCM's enterprise-wide Information Security Management System (ISMS) aligned to ISO/IEC 27001 and NIST 800-53, covering corporate IT and OT environments across all entities.
  • Establish and chair an Information Security Governance Committee with representation from TCM, Tract, and Fleet Data Centers - integrating into the existing risk committee structure chaired by the Chief Legal Officer (CLO).
  • Own the information security policy framework across all entities, including the Acceptable Use Policy, AI Policy, Access Control Policy, Data Classification & Handling, Incident Response, and supporting Fleet policies (0034-0039).
  • Drive the adoption and operationalization of ISO 27001 certification and ISO 42001 (AI Management System) across appropriate entities.
  • Present security posture, risk exposure, and program maturity to the ELT Steering Committee (SteerCo), Risk Committees, and the CITO on a regular cadence.
  • Serve as the authoritative voice on information security during investor operational due diligence (ODD) processes, responding to DDQs (e.g., Future Fund ORR, SIG questionnaires) and representing TCM's security posture to institutional investors.

Compliance & Regulatory
  • Build and operate the information security compliance program spanning TCM corporation, Tract (land/development), and Fleet Data Centers (critical infrastructure) - recognizing the distinct regulatory and contractual obligations of each strategy.
  • Maintain and continuously improve alignment with applicable frameworks: ISO 27001, NIST 800-53, SOC 2 Type II, GDPR, CCPA, and customer-specific security requirements (hyperscaler contracts, FedRAMP where applicable).
  • Own TCM's compliance posture scoring using Microsoft Purview Compliance Manager and equivalent tools, mapping internal controls to required frameworks.
  • Partner with the CLO and outside counsel (Kirkland & Ellis) to ensure information security practices align with securities regulations, fiduciary obligations, fund LPA requirements, and evolving data privacy legislation.
  • Manage the relationship with Trace3 Security Solutions and other third-party assessors for independent penetration testing, vulnerability assessments, and security audits conducted against NIST 800-115, OWASP, and MITRE ATT&CK methodologies.
  • Ensure compliance with EU data protection requirements (GDPR, Schrems II) as TCM expands its European investment footprint through Tract II.

Controls & Risk Management
  • Define, implement, and monitor information security controls at both the TCM enterprise level and within each investment strategy, ensuring appropriate segmentation and tailoring of controls to each entity's risk profile.
  • Own the enterprise third-party / vendor risk management program in coordination with the Technology Requirements Checklist, evaluating all vendors against 50+ controls spanning Authentication & Identity, Security & Compliance Certifications, Data Residency & Protection, Integration & API Security, and Operational Resilience.
  • Oversee data loss prevention (DLP), information classification, sensitivity labeling (Microsoft Purview), and data governance controls to protect investor data, financial information, deal pipeline data, proprietary design drawings, and other Confidential Information.
  • Manage the enterprise identity and access management (IAM) governance in partnership with the IT team - including Entra ID Conditional Access policies, RBAC enforcement, SCIM lifecycle automation, and Privileged Identity Management (PIM).
  • Lead the Insider Risk Management program using Microsoft 365 security stack capabilities, including behavioral analytics for data exfiltration, IP theft, and policy violations.
  • Maintain and exercise the Incident Response Plan and Disaster Recovery / Business Continuity Plans, coordinating with the CITO, CLO, and risk committee chairs for incident classification, escalation, and investor/customer notification per contractual timelines.
  • Govern the security awareness training program (KnowBe4), including phishing simulations, the Tract Capital Cyber Security Safety Guide, and new-hire security onboarding.

Collaboration & Stakeholder Management
  • Partner with Fleet's SVP of Physical, OT, & Cyber Security to align corporate IT security governance with converged physical/OT/cyber security operations at data center facilities.
  • Collaborate with the CFO and finance organization on controls relevant to fund accounting, capital call processes, wire transfer security, and investor portal security.
  • Support the CITO in AI governance, ensuring Enterprise-Approved AI Tools (e.g., Glean) operate within security and data governance guardrails and that the AI Policy is enforced.
  • Interface with hyperscaler customer security teams to satisfy contractual security requirements and support customer due diligence processes.
  • Work with Investor Relations to maintain DDQ-ready security documentation and ensure timely, accurate responses to ODD questionnaires.

Basic Qualifications
  • Bachelor's degree in Information Security, Computer Science, Engineering, or related field.
  • 10+ years of progressive information security experience, with at least 5 years in a CISO, Deputy CISO, or equivalent senior security leadership role.
  • Demonstrated experience building and maturing information security programs in private equity, asset management, or financial services environments with multi-entity / multi-fund structures.
  • Deep working knowledge of ISO 27001, NIST 800-53, SOC 2 Type II, and demonstrated experience leading organizations through certification and audit processes.
  • Expert-level understanding of data protection regulations (GDPR, CCPA) and their application to investment management firms with cross-border operations.
  • Hands-on experience with Microsoft 365 security and compliance stack - Entra ID, Defender XDR, Purview (DLP, sensitivity labels, Insider Risk, Compliance Manager), Intune, and Conditional Access.
  • Strong background in third-party risk management and vendor security assessment programs.
  • Experience with incident response planning, execution, and post-incident reporting in environments with investor and regulatory notification obligations.
  • Proven ability to communicate security posture and risk to executive leadership, boards, and institutional investors - including experience with investor ODD/DDQ processes.

Preferred Qualifications
  • Experience with critical infrastructure security, including OT/ICS environments (data centers, utilities, industrial).
  • Familiarity with ISO 42001 (AI Management System) or demonstrated experience establishing AI governance frameworks.
  • Experience supporting SEC-registered or SEC-exempt investment advisers and understanding of related compliance obligations.
  • Knowledge of REIT structures, fund accounting controls, and the security considerations unique to real estate private equity.
  • Experience with FedRAMP requirements as they relate to customer contractual obligations.
  • Advanced degree (MBA, MS in Cybersecurity, or equivalent).
  • Active certifications: CISSP, CISM, CISA, CRISC, or equivalent.

Competency
  • Strategic Vision - Ability to translate business strategy and growth trajectory into a scalable security program that enables, rather than constrains, the business.
  • Multi-Entity Governance - Comfort operating across distinct legal entities with different risk profiles, regulatory postures, and operational models under a unified governance umbrella.
  • Investor-Grade Communication - Experience presenting security posture and controls to sophisticated institutional investors (sovereign wealth funds, pensions, endowments) during due diligence.
  • Hands-On Leadership - Willingness to operate at both the strategic and tactical level, particularly as the security function matures and scales.
  • Collaborative Influence - Ability to drive outcomes across business units (TCM, Tract, Fleet) through influence rather than direct authority, partnering effectively with Legal, Finance, Operations, and Engineering stakeholders.

Annual Compensation Range: $275,000-$300,00 Base Salary + Discretionary Bonus
Tract Capital Management offers a competitive total compensation package commensurate with experience, including base salary, annual performance bonus, and a comprehensive benefits program. Details will be discussed during the interview process.
Tract Capital Employment
Tract Capital employees enjoy competitive compensation and comprehensive benefits, including 100% employer-covered medical, dental, and vision insurance, a 401K program, standard paid holidays, and unlimited PTO.
NOTE: This job description is not intended to be all-inclusive. Employees may perform other related duties to meet the organization's ongoing needs.
Tract Capital is proud to be an Equal Opportunity Employer. Qualified applicants are considered for employment regardless of age, race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or veteran status. If you need assistance applying for any of our open positions, please contact us at info@tractcapital.com.

Apply