Information Security Policy Manager

RightClick; Connecticut; Hybrid; USD 120,000 - 160,000; Full time

Job summary

RightClick in Fairfield County, CT, seeks an Information Security Policy Manager to lead the development and continual improvement of information security policy across a global GRC function. You will translate complex regulatory concepts into clear language for business audiences.

This hybrid role is based in Fairfield County, CT. The ideal candidate writes clear policies grounded in risk management, brings 7+ years in cybersecurity with policy leadership in regulated environments, and

Qualifications

• 7+ years in information or cybersecurity experience.
• 3+ years managing security policy in regulated industry.
• 3+ years in hands-on technical roles.
• Strong understanding of cybersecurity regulations and frameworks.
• Ability to write clear, actionable policies grounded in risk concepts.
• Bachelor's degree or equivalent experience.
• GRC tooling experience and certification a plus.

Responsibilities

• Enhance and extend the information security policy library.
• Perform policy mapping and gap analysis for compliance.
• Develop and map controls and testing procedures.
• Evaluate security controls and recommend improvements.
• Support external assessments, audits, and regulatory examinations.
• Contribute to additional GRC initiatives as needed.

Skills

Cybersecurity experience

Policy management

Regulated industry

Policy writing

NIST CSF familiarity

Regulatory knowledge

Risk management

Education

Bachelor's degree in Information Security / CS / IT

Tools

GRC tooling

Job description

Our client is seeking an Information Security Policy Manager to lead the development and continual improvement of information security policy across a global Governance, Risk, and Compliance (GRC) function. The ideal candidate is a strong writer and critical thinker who can translate complex technical and regulatory concepts into clear language for business audiences. This is a hybrid position based in Fairfield County, CT.

Information Security Policy Manager's Responsibilities And Duties

• Enhance and extend the information security policy library in alignment with regulations, risk appetite, and industry frameworks
• Conduct policy mapping and gap analysis to demonstrate compliance with cybersecurity frameworks, regulations, and laws
• Develop and map controls and testing procedures to drive and measure policy compliance
• Evaluate security controls and communicate recommendations for improvement
• Support external assessments, audits, and regulatory examinations with evidence of compliance
• Contribute to additional GRC initiatives as needed

Information Security Policy Manager's Qualifications And Skills

• At least 7 years of information or cybersecurity experience, including 3+ years managing security policy in a regulated industry and 3+ years in hands-on technical roles
• Strong understanding of cybersecurity regulations such as DORA, SEC, FFIEC, EBA, SFC, and MAS
• Working familiarity with security frameworks such as NIST CSF
• Proven ability to write clear, actionable policies grounded in risk management concepts
• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field, or equivalent experience
• GRC tooling experience, regulatory exam response experience, and CISM certification are a plus

RightClick is an equal opportunity employer who agrees not to discriminate against any employee or job applicant irrespective of race, color, creed, alienage, religion, sex, national origin, age, disability, gender (including gender identity), marital status, sexual orientation, citizenship or any other characteristic protected by law.