Information Security Manager

Role: Information Security Manager

Location: Austin, TX (Onsite/Hybrid only, no remote option)

We are seeking an experienced Information Security Manager to lead enterprise risk governance initiatives and help establish a mature cybersecurity risk management framework. A hands-on security leader with deep expertise in enterprise risk management, governance frameworks, stakeholder collaboration, and cybersecurity risk assessment who can build sustainable processes and drive organizational adoption.

RESPONSIBILITIES:

• Design and implement end-to-end risk governance processes, including risk intake, assessment, approval, mitigation, monitoring, and reporting.
• Build and manage the enterprise risk register, including risk taxonomy, scoring methodology, and prioritization framework.
• Define roles, responsibilities, and escalation paths for risk owners, reviewers, and governance committees.
• Partner with business, technology, security, and governance teams to gather requirements and align risk management practices.
• Facilitate workshops and working sessions to drive adoption of risk governance processes.
• Support the identification and onboarding of initial cybersecurity and technology risks into the enterprise risk register.
• Develop audit-ready documentation, procedures, and governance standards.
• Provide knowledge transfer and training to internal security teams to ensure long-term sustainability.

DELIVERABLES:

• Enterprise Risk Register Framework and standardized templates
• Risk Scoring and Prioritization Model
• Risk Governance Processes and RACI Matrix
• Initial Population of Cybersecurity and Technology Risks
• Comprehensive Documentation and Operational Procedures

REQUIRED EXPERIENCE:

Candidates must clearly list actual years of experience for each of the following:

• 8+ years designing and implementing Risk Register Frameworks
• 8+ years developing Risk Scoring and Prioritization Models
• 8+ years creating Governance Processes and Workflow Designs
• 8+ years leading Stakeholder Engagement and Enablement initiatives
• 8+ years producing Documentation and delivering Knowledge Transfer