Haystack
← Back to Jobs
Technology
VSVerito Solutions logo

Head of Cybersecurity, Data Security & Governance(Insurance Industry) Atlanta, Georgia(Onsite)

Verito SolutionsAtlanta, GA🇺🇸United StatesPosted Oct 15, 2026

Quick Overview

Seniority
Leader
Work mode
On Site
Location
Atlanta, GA, United States
Posted
2 days ago
AWSEncryptionSOC 2AzureGDPRPenetration TestingStakeholder ManagementZero Trust

Job Description

Head of Cybersecurity, Data Security & Governance(Insurance/Banking Industry)
Atlanta, Georgia(Onsite)
Long-term Contract
Please prioritize candidates with:
  • 8+ years of experience in cybersecurity, information security, risk management, or governance
  • 3+ years of leadership or people management experience
  • Strong cybersecurity, data security/privacy, GRC, risk management, compliance, and security transformation experience
  • Experience within insurance, financial services, or another highly regulated industry
  • Strong exposure to security audits and compliance programs, including SOC 1/SOC 2, ISO 27001, NIST, PCI-DSS, SOX, and GDPR
  • Cloud security experience across Azure/AWS, along with DLP, IAM, vulnerability management, incident response, and SIEM/security monitoring
  • Experience working with executive leadership, auditors, regulators, and cross-functional stakeholders
Preferred certifications include CISSP, CISM, CRISC, CCSP, ISO 27001, CDPSE, and relevant Azure/AWS security certifications.
Given the strategic nature of this position, we are looking for strong leadership experience in cybersecurity, data security, governance, risk management, compliance, and security transformation initiatives.
Please review the attached JD for the complete requirements and share suitable profiles for review.
Position Summary
The Manager, Cybersecurity, Data Security & Governance is responsible for leading
cybersecurity, data protection, governance, risk, and compliance initiatives across the
organization. This role ensures the confidentiality, integrity, and availability of enterprise
systems and sensitive insurance data while supporting regulatory compliance, audit
readiness, and business risk management.
The manager will work closely with technology, security, legal, compliance, internal
audit, and business stakeholders to establish and maintain a robust security and
governance framework that aligns with business objectives and regulatory
requirements.
Key Responsibilities
Cybersecurity & Information Security Management
 Lead the implementation and continuous improvement of cybersecurity programs
and controls.
 Develop and maintain security policies, standards, procedures, and governance
frameworks.
 Conduct security risk assessments and recommend mitigation strategies.
 Partner with IT teams to ensure secure application development, infrastructure,
and cloud deployments.
 Drive vulnerability management, penetration testing, and security remediation
efforts.
 Manage incident response, cyber resilience, and business continuity planning
activities.
Data Security & Privacy
 Lead enterprise data protection initiatives.
 Implement and maintain Data Loss Prevention (DLP) controls.
 Oversee data classification, encryption, retention, and secure disposal practices.
 Ensure the protection of Personally Identifiable Information (PII), policyholder
data, financial information, and other sensitive business data.
 Support privacy and data protection requirements across business operations.
Governance, Risk & Compliance (GRC)
 Manage enterprise cybersecurity governance activities.
 Maintain security risk registers and compliance tracking mechanisms.
 Ensure compliance with industry frameworks and regulatory requirements.
 Coordinate internal and external audits and remediation activities.
 Monitor control effectiveness and provide regular reporting to leadership teams.
Insurance Regulatory & Audit Compliance
 Support compliance with insurance industry regulations and audit requirements.
 Lead preparation and execution of:
o SOC 1 / SOC 2 Audits
o NAIC Model Laws
o State Insurance Regulatory Requirements
o PCI-DSS
o SOX Controls
o ISO 27001
o NIST Cybersecurity Framework
o GDPR and applicable Privacy Regulations
o Cyber Insurance Security Requirements
 Coordinate with internal audit, external auditors, regulators, and compliance
teams.
 Ensure timely remediation of audit observations and compliance findings.
Third-Party Risk Management
 Perform cybersecurity assessments for vendors and third-party service providers.
 Evaluate risks associated with outsourcing, cloud platforms, and business
partners.
 Monitor vendor compliance with contractual security obligations.
 Support procurement teams in security due diligence activities.
Security Operations & Monitoring
 Oversee ongoing security monitoring and threat detection activities.
 Partner with security operations teams to investigate and respond to incidents.
 Review security metrics, KPI dashboards, and operational risk indicators.
 Support implementation and optimization of SIEM, endpoint security, and threat
intelligence platforms.
Program & Stakeholder Management
 Provide security updates and risk reporting to senior leadership.
 Develop roadmaps and plans to improve organizational security maturity.
 Manage project budgets, resource planning, and vendor relationships.
 Mentor and guide junior security and governance professionals.
Required Qualifications
Education
 Bachelor's degree in:
o Cybersecurity
o Computer Science
o Information Systems
o Information Security
o Engineering
o Related Field
Experience
 8+ years of experience in Cybersecurity, Information Security, Risk Management,
or Governance.
 3+ years of leadership or people management experience.
 Experience supporting insurance, financial services, or highly regulated
industries.
 Experience managing security audits and compliance programs.
 Strong understanding of cloud security, data protection, and governance
frameworks.
 Experience working with executive leadership and auditors.
Preferred Certifications
Cybersecurity
 CISSP
 CISM
 CRISC
 CCSP
 CEH
Governance & Compliance
 ISO 27001 Lead Auditor
 ISO 27001 Lead Implementer
 CDPSE
 Certified Risk Management Professional
Cloud Security
 Microsoft Certified: Azure Security Engineer Associate
 Azure Solutions Architect Expert
 AWS Security Specialty
Required Skills
Technical Skills
 Cybersecurity Frameworks (NIST, ISO 27001)
 Security Risk Management
 Data Security & Privacy
 Identity & Access Management (IAM)
 Zero Trust Architecture
 Cloud Security (Azure, AWS)
 Data Loss Prevention (DLP)
 Vulnerability Management
 Security Incident Response
 SIEM & Security Monitoring
Leadership Skills
 Strategic Planning
 Audit & Compliance Management
 Executive Communication
 Vendor Management
 Risk Assessment & Mitigation
 Team Leadership
--

Sayantan Das

Senior  Tech Recruiter | Talent Acquisition | People & Culture

[ P: +1  ]
[   ]
LinkedIn: [  ]

[ Verito Solutions - An E-verified company]

Similar jobs

Browse related jobs

Apply