Lead, Information Security Policy & Enablement

pru; Newark (NJ); Hybrid; USD 115,000 - 189,000; Full time

Benefits offered by this job

Medical, dental, vision, life

Disability insurance

PTO & leave benefits

401(k) with company match

Job summary

Prudential is seeking a Lead, Information Security Policy & Enablement to bridge Secure Governance with business, product, and technology teams. You will shape policy communication, adoption, and guidance across the enterprise, partnering with Risk, Compliance, Legal, and Audit to translate requirements into actionable expectations.

You will drive change management, develop communications, FAQs, and readiness materials, and track adoption to continuously improve program effectiveness.

Qualifications

• Experience supporting information security governance, policy management, compliance programs, or technology risk initiatives.
• Working knowledge of security and risk frameworks such as NIST, ISO 27001, FFIEC, NYDFS, SOC, or similar standards.
• Ability to translate complex security concepts, risk priorities, governance expectations, and control obligations into clear, practical guidance for diverse audiences.
• Strong communication, change management, and stakeholder engagement skills.
• Experience influencing across technology, business, risk, compliance, and audit organizations.
• Working knowledge in one or more security domains such as IAM, ASM, CDR, cloud security, third-party risk, or data protection.

Responsibilities

• Drive stakeholder engagement with security, technology, product, business, risk, compliance, legal, audit, and communications teams to align policy updates and adoption strategies.
• Gather stakeholder feedback and translate security requirements into practical, actionable expectations.
• Build trusted partnerships across Information Security, business, technology, risk, compliance, legal, and audit teams to drive alignment and successful outcomes.
• Develop communication and change management strategies that increase awareness and adoption of security policies and standards.
• Create stakeholder communications, FAQs, implementation guidance, talking points, and readiness materials.
• Drive alignment and adoption through coordinated engagement, clear communications, and collaboration with awareness and education teams.
• Track adoption trends and stakeholder feedback to continuously improve program effectiveness.
• Build reusable toolkits, templates, and engagement playbooks that support consistent policy implementation.
• Translate complex security priorities, policy requirements, and governance expectations into practical guidance for technical, operational, and executive audiences.
• Help stakeholders understand not just what is changing, but why it matters and how it supports broader business objectives.

Education

Bachelor's degree or equivalent experience in Cybersecurity, Information Security, Risk Management, Business, Communications, a related field or equivalent experience

Tools

Jira

ServiceNow

Job description

Job Classification

Technology - Information Security

Your Team

Are you interested in building capabilities that make Information Security easier to understand, adopt, and execute? As part of Prudential's Global Technology & Operations organization, the Information Security team is strengthening its governance capabilities to improve visibility into security risk, policy adoption, and program execution across the enterprise.

Lead, Information Security Policy & Enablement

As the Lead, Information Security Policy & Enablement , you will serve as the primary bridge between Information Security's Secure Governance Office and business, product, technology, and corporate functions. Reporting to the Director of Information Security Governance, you'll help shape how security policies, standards, and guidance are communicated, understood, and adopted across the enterprise. Partnering with security advisors, Risk Management, Compliance, Legal, Internal Audit, Product, Engineering, and business stakeholders, you'll transform security requirements into practical guidance that helps teams confidently make security part of how they work every day.

Location & Work Structure

This role is based in our office in Newark, NJ. Our organization follows a hybrid work structure where employees can work remotely and from the office, as needed, based on demands of specific tasks or personal work preferences. This position is hybrid and requires your on-site presence on a reoccurring weekly basis at least 3 days per week.

Typical Day

Drive Stakeholder Engagement

Partner with security, technology, product, business, risk, compliance, legal, audit, and communications teams to align policy updates and adoption strategies.

Gather stakeholder feedback and translate security requirements into practical, actionable expectations.

Build trusted partnerships across Information Security, business, technology, risk, compliance, legal, and audit teams to drive alignment and successful outcomes.

Lead Change, Communications & Adoption

Develop communication and change management strategies that increase awareness and adoption of security policies and standards.

Create stakeholder communications, FAQs, implementation guidance, talking points, and readiness materials.

Drive alignment and adoption through coordinated engagement, clear communications, and collaboration with awareness and education teams.

Track adoption trends and stakeholder feedback to continuously improve program effectiveness.

Enable Policy Adoption & Stakeholder Readiness

Build reusable toolkits, templates, and engagement playbooks that support consistent policy implementation.

Translate complex security priorities, policy requirements, and governance expectations into practical guidance for technical, operational, and executive audiences.

Help stakeholders understand not just what is changing, but why it matters and how it supports broader business objectives.

The Skills & Expertise You Bring

• Bachelor's degree or equivalent experience in Cybersecurity, Information Security, Risk Management, Business, Communications, a related field or equivalent experience
• Experience supporting information security governance, policy management, compliance programs, or technology risk initiatives.
• Working k nowledge of security and risk frameworks such as NIST, ISO 27001, FFIEC, NYDFS, SOC, or similar standards.
• Ability to translate complex security concepts , risk priorities, governance expectations, and control obligations into clear, practical guidance for diverse audiences.
• Strong communication , change management, and stakeholder engagement skills.
• Experience influencing across technology, business, risk, compliance, and audit organizations.
• Working knowledge in one or more security domains such as IAM, ASM, CDR, cloud security, third-party risk, or data protection.

Preferred Qualifications

• Experience within an Information Security, Technology Risk, BISO, Security Advisory, or Governance function.
• Experience developing enablement materials, policy adoption metrics, communications strategies, adoption programs, or learning content.
• Experience supporting audits, regulatory examinations, or governance forums.
• Familiarity with GRC platforms, policy management tools, Jira, or ServiceNow.
• CISSP, CISM, CRISC, CISA, Prosci , or similar certifications.

#LI-Hybrid #LI-LR1

What we offer you:

Prudential is required by state specific laws to include the salary range for this role when hiring a resident in applicable locations. The salary range for this role is from $114,500.00 to $188,900.00. Specific pricing for the role may vary within the above range based on many factors including geographic location, candidate experience, and skills. Market competitive base salaries, with a yearly bonus potential at every level.

Medical, dental, vision, life insurance, disability insurance, Paid Time Off (PTO), and leave of absences, such as parental and military leave.

401(k) plan with company match (up to 4%).