Information Security Specialist Lead

Experian; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Experian is seeking an Information Security Specialist Lead to drive the identification, documentation, and implementation of the security risk and controls framework across the Enterprise. You will design risk-based controls, collaborate with business partners, and help sustain a strong security posture.

The role involves leading control activities, mapping controls in Archer, and providing remediation recommendations to ensure compliance with NIST/ISO/COBIT/COBIT standards.

Qualifications

• Bachelor's degree or equivalent with strong security/IT background.
• 5+ years hands-on controls experience, with design, implementation, and evaluation.
• Experience with GRC tools such as Archer; knowledge of NIST/ISO/COBIT/CMMI/OWASP/ITIL.

Responsibilities

• Lead the security risk and control modularisation strategy across the Enterprise.
• Maintain and update the integrated risk and control framework per policies and standards.
• Review control activities and ensure requirements align with control standards and goals.
• Identify and report control gaps; provide remediation recommendations.
• Produce management reports and detailed presentations on risk and controls program.
• Develop content for controls implementation workshops with control owners.
• Ensure controls are mapped to risks in Archer GRC platform.
• Monitor risk indicators and support control assurance activities.
• Support strategic projects with subject matter expertise in controls.

Skills

Security governance

Risk management

Controls implementation

Stakeholder communication

Non-technical translation

Education

BSc in Computer Science / MIS

Tools

Archer

Job description

Company Description

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more. Experian invests in people and new advanced technologies to unlock the power of data. We have an amazing team of 25,200 people in 32 countries.

Job Description

Job Description

Reporting to the Head of Information Security Policy and Standards, you will lead the identification, documentation, and implementation of the security risk and controls framework across the Enterprise to meet Experian's cybersecurity and risk requirements.

The Information Security Specialist Lead will contribute to the team's goals of ensuring a sound security posture by designing and implementing risk-based security controls.

You will contribute to the design and operation of best-practice cyber risk management, collaborating with partners across the business.

Responsibilities

• Lead the security risk and control modularisation strategy, engaging with the Regional BU, centralised security and IT control owners across the Enterprise to populate the controls library.
• Maintain and update the integrated risk and control framework following information security policies, standards, industry-accepted practice, and regulations.
• Review and provide expert check and challenge on first-line business units defined control activities, ensuring agreement on the requirements outlined in control standards and goals.
• Identify, document, and report control activity gaps, and provide remediation recommendations.
• Compile management reports, summary analysis, and detailed presentations to describe the risk and controls program.
• Develop and present content for controls implementation workshops with control owners across the Enterprise.
• Ensure information security controls are aligned and mapped to applicable risks (risk types and risk register entries) in the Archer GRC platform.
• Monitor and stay informed about internal and external risk indicators that could affect and disrupt Experian and our mission. Provide these risk indicators as inputs to control assurance and other EGSO activities.
• Contribute to the efficiency of the risk and controls program by standardizing and automating processes, capturing stakeholder feedback to drive improvement, and enhancing the engagement model.
• Support strategic projects representing the Information Security Governance team and provide subject matter expertise in the controls space.

Qualifications

• Bachelor's degree in computer science, management information systems or relevant field or equivalent demonstrable experience.
• 5+ years of hands-on controls experience, with security control design, implementation, and evaluation.
• Experience with GRC tools, such as Archer.
• Understanding of industry best practices (e.g., NIST, ISO, COBIT, CMMI, OWASP, ITIL)
• A detailed knowledge of governance, risk, and controls principles.
• Knowledge of IT technologies and methods to secure them, with a knowledge of Cloud security. A working knowledge of the AWS cloud environment is beneficial.
• Knowledge of cybersecurity organisation practices, operations, risk management processes, principles, architectural requirements, engineering and threats and vulnerabilities.
• Industry certifications such as CCSP, CRISC, CISSP, CISM or equivalent experience.
• Understand and translate technical requirements for non-technical audiences.
• Knowledge of the financial services industry and its regulations is preferred.
• Experience using AI to automate processes is desirable.

Additional Information

Our uniqueness is that we celebrate yours. Experian's people first, inclusive and purpose driven culture is multi award-winning; World's Best Workplaces 2025 (Fortune Global Top 25), Great Place To Work in 26 countries to name a few. Check out Experian Life on social or explore our Careers Site to understand why.

Experian is proud to be an Equal Opportunity Employer for all groups protected under applicable federal, state and local law, including protected veterans and individuals with disabilities. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.

Our benefits include: Medical, life and dental insurance, Asociacion Solidarista, International Share Save Plan, Flex Work/Work from home, Paid time off, Annual Performance Bonus, Education Reimbursement, Family Bonding, Bereavement Leave, Referral Program, and more.

#LI-Remote

This is a remote position.