What are the responsibilities and job description for the Head of Cybersecurity, Data Security & Governance(Insurance Industry) Atlanta, Georgia(Onsite) position at Verito Solutions?
Head of Cybersecurity, Data Security & Governance(Insurance/Banking Industry)
Atlanta, Georgia(Onsite)
Long-term Contract
Please prioritize candidates with:
- 8 years of experience in cybersecurity, information security, risk management, or governance
- 3 years of leadership or people management experience
- Strong cybersecurity, data security/privacy, GRC, risk management, compliance, and security transformation experience
- Experience within insurance, financial services, or another highly regulated industry
- Strong exposure to security audits and compliance programs, including SOC 1/SOC 2, ISO 27001, NIST, PCI-DSS, SOX, and GDPR
- Cloud security experience across Azure/AWS, along with DLP, IAM, vulnerability management, incident response, and SIEM/security monitoring
- Experience working with executive leadership, auditors, regulators, and cross-functional stakeholders
Preferred certifications include CISSP, CISM, CRISC, CCSP, ISO 27001, CDPSE, and relevant Azure/AWS security certifications.
Given the strategic nature of this position, we are looking for strong leadership experience in cybersecurity, data security, governance, risk management, compliance, and security transformation initiatives.
Please review the attached JD for the complete requirements and share suitable profiles for review.
Position Summary
The Manager, Cybersecurity, Data Security & Governance is responsible for leading
cybersecurity, data protection, governance, risk, and compliance initiatives across the
organization. This role ensures the confidentiality, integrity, and availability of enterprise
systems and sensitive insurance data while supporting regulatory compliance, audit
readiness, and business risk management.
The manager will work closely with technology, security, legal, compliance, internal
audit, and business stakeholders to establish and maintain a robust security and
governance framework that aligns with business objectives and regulatory
requirements.
The Manager, Cybersecurity, Data Security & Governance is responsible for leading
cybersecurity, data protection, governance, risk, and compliance initiatives across the
organization. This role ensures the confidentiality, integrity, and availability of enterprise
systems and sensitive insurance data while supporting regulatory compliance, audit
readiness, and business risk management.
The manager will work closely with technology, security, legal, compliance, internal
audit, and business stakeholders to establish and maintain a robust security and
governance framework that aligns with business objectives and regulatory
requirements.
Key Responsibilities
Cybersecurity & Information Security Management
Lead the implementation and continuous improvement of cybersecurity programs
and controls.
Develop and maintain security policies, standards, procedures, and governance
frameworks.
Conduct security risk assessments and recommend mitigation strategies.
Partner with IT teams to ensure secure application development, infrastructure,
and cloud deployments.
Drive vulnerability management, penetration testing, and security remediation
efforts.
Manage incident response, cyber resilience, and business continuity planning
activities.
Data Security & Privacy
Lead enterprise data protection initiatives.
Implement and maintain Data Loss Prevention (DLP) controls.
Oversee data classification, encryption, retention, and secure disposal practices.
Cybersecurity & Information Security Management
Lead the implementation and continuous improvement of cybersecurity programs
and controls.
Develop and maintain security policies, standards, procedures, and governance
frameworks.
Conduct security risk assessments and recommend mitigation strategies.
Partner with IT teams to ensure secure application development, infrastructure,
and cloud deployments.
Drive vulnerability management, penetration testing, and security remediation
efforts.
Manage incident response, cyber resilience, and business continuity planning
activities.
Data Security & Privacy
Lead enterprise data protection initiatives.
Implement and maintain Data Loss Prevention (DLP) controls.
Oversee data classification, encryption, retention, and secure disposal practices.
Ensure the protection of Personally Identifiable Information (PII), policyholder
data, financial information, and other sensitive business data.
Support privacy and data protection requirements across business operations.
Governance, Risk & Compliance (GRC)
Manage enterprise cybersecurity governance activities.
Maintain security risk registers and compliance tracking mechanisms.
Ensure compliance with industry frameworks and regulatory requirements.
Coordinate internal and external audits and remediation activities.
Monitor control effectiveness and provide regular reporting to leadership teams.
Insurance Regulatory & Audit Compliance
Support compliance with insurance industry regulations and audit requirements.
Lead preparation and execution of:
o SOC 1 / SOC 2 Audits
o NAIC Model Laws
o State Insurance Regulatory Requirements
o PCI-DSS
o SOX Controls
o ISO 27001
o NIST Cybersecurity Framework
o GDPR and applicable Privacy Regulations
o Cyber Insurance Security Requirements
Coordinate with internal audit, external auditors, regulators, and compliance
teams.
Ensure timely remediation of audit observations and compliance findings.
Third-Party Risk Management
Perform cybersecurity assessments for vendors and third-party service providers.
Evaluate risks associated with outsourcing, cloud platforms, and business
partners.
data, financial information, and other sensitive business data.
Support privacy and data protection requirements across business operations.
Governance, Risk & Compliance (GRC)
Manage enterprise cybersecurity governance activities.
Maintain security risk registers and compliance tracking mechanisms.
Ensure compliance with industry frameworks and regulatory requirements.
Coordinate internal and external audits and remediation activities.
Monitor control effectiveness and provide regular reporting to leadership teams.
Insurance Regulatory & Audit Compliance
Support compliance with insurance industry regulations and audit requirements.
Lead preparation and execution of:
o SOC 1 / SOC 2 Audits
o NAIC Model Laws
o State Insurance Regulatory Requirements
o PCI-DSS
o SOX Controls
o ISO 27001
o NIST Cybersecurity Framework
o GDPR and applicable Privacy Regulations
o Cyber Insurance Security Requirements
Coordinate with internal audit, external auditors, regulators, and compliance
teams.
Ensure timely remediation of audit observations and compliance findings.
Third-Party Risk Management
Perform cybersecurity assessments for vendors and third-party service providers.
Evaluate risks associated with outsourcing, cloud platforms, and business
partners.
Monitor vendor compliance with contractual security obligations.
Support procurement teams in security due diligence activities.
Security Operations & Monitoring
Oversee ongoing security monitoring and threat detection activities.
Partner with security operations teams to investigate and respond to incidents.
Review security metrics, KPI dashboards, and operational risk indicators.
Support implementation and optimization of SIEM, endpoint security, and threat
intelligence platforms.
Program & Stakeholder Management
Provide security updates and risk reporting to senior leadership.
Develop roadmaps and plans to improve organizational security maturity.
Manage project budgets, resource planning, and vendor relationships.
Mentor and guide junior security and governance professionals.
Support procurement teams in security due diligence activities.
Security Operations & Monitoring
Oversee ongoing security monitoring and threat detection activities.
Partner with security operations teams to investigate and respond to incidents.
Review security metrics, KPI dashboards, and operational risk indicators.
Support implementation and optimization of SIEM, endpoint security, and threat
intelligence platforms.
Program & Stakeholder Management
Provide security updates and risk reporting to senior leadership.
Develop roadmaps and plans to improve organizational security maturity.
Manage project budgets, resource planning, and vendor relationships.
Mentor and guide junior security and governance professionals.
Required Qualifications
Education
Bachelor's degree in:
o Cybersecurity
o Computer Science
o Information Systems
o Information Security
o Engineering
o Related Field
Education
Bachelor's degree in:
o Cybersecurity
o Computer Science
o Information Systems
o Information Security
o Engineering
o Related Field
Experience
8 years of experience in Cybersecurity, Information Security, Risk Management,
or Governance.
8 years of experience in Cybersecurity, Information Security, Risk Management,
or Governance.
3 years of leadership or people management experience.
Experience supporting insurance, financial services, or highly regulated
industries.
Experience managing security audits and compliance programs.
Strong understanding of cloud security, data protection, and governance
frameworks.
Experience working with executive leadership and auditors.
Experience supporting insurance, financial services, or highly regulated
industries.
Experience managing security audits and compliance programs.
Strong understanding of cloud security, data protection, and governance
frameworks.
Experience working with executive leadership and auditors.
Preferred Certifications
Cybersecurity
CISSP
CISM
CRISC
CCSP
CEH
Governance & Compliance
ISO 27001 Lead Auditor
ISO 27001 Lead Implementer
CDPSE
Certified Risk Management Professional
Cloud Security
Microsoft Certified: Azure Security Engineer Associate
Azure Solutions Architect Expert
AWS Security Specialty
Cybersecurity
CISSP
CISM
CRISC
CCSP
CEH
Governance & Compliance
ISO 27001 Lead Auditor
ISO 27001 Lead Implementer
CDPSE
Certified Risk Management Professional
Cloud Security
Microsoft Certified: Azure Security Engineer Associate
Azure Solutions Architect Expert
AWS Security Specialty
Required Skills
Technical Skills
Cybersecurity Frameworks (NIST, ISO 27001)
Technical Skills
Cybersecurity Frameworks (NIST, ISO 27001)
Security Risk Management
Data Security & Privacy
Identity & Access Management (IAM)
Zero Trust Architecture
Cloud Security (Azure, AWS)
Data Loss Prevention (DLP)
Vulnerability Management
Security Incident Response
SIEM & Security Monitoring
Leadership Skills
Strategic Planning
Audit & Compliance Management
Executive Communication
Vendor Management
Risk Assessment & Mitigation
Team Leadership
Data Security & Privacy
Identity & Access Management (IAM)
Zero Trust Architecture
Cloud Security (Azure, AWS)
Data Loss Prevention (DLP)
Vulnerability Management
Security Incident Response
SIEM & Security Monitoring
Leadership Skills
Strategic Planning
Audit & Compliance Management
Executive Communication
Vendor Management
Risk Assessment & Mitigation
Team Leadership
Sayantan Das
Senior Tech Recruiter | Talent Acquisition | People & Culture
[ P: 1 ]
[ ]
LinkedIn: [ ]
[ Verito Solutions - An E-verified company]