Lead, Information Security Regulatory & Compliance

pru; Newark (NJ); Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Prudential in Newark, NJ is seeking a Lead, Information Security Regulatory & Compliance Support to coordinate responses to regulators, examiners, and auditors, ensuring timely, accurate submissions across the enterprise. You will support intake, tracking, evidence collection, and readiness activities under Information Security Governance.

This role is hybrid, requiring on-site presence at least 3 days per week in Newark, NJ, and involves collaboration with Legal, Compliance, Risk, and

Qualifications

• Experience supporting regulatory exams in financial services.
• Ability to collect evidence, draft responses, and coordinate approvals.
• Knowledge of NYDFS 23 NYCRR 500, FFIEC, ISO 27001, SOC 1 & 2.
• Strong governance, controls and traceability across engagements.

Responsibilities

• Coordinate responses to regulatory examinations and audits.
• Maintain centralized trackers with due dates, owners, and evidence.
• Collaborate with Legal, Compliance, Risk, and IT teams.
• Prepare leaders for regulatory interactions and walkthroughs.
• Develop briefing materials, FAQs, and status updates.
• Monitor observations and remediation plans.

Skills

Regulatory exams coordination

Audits & evidence collection

Stakeholder coordination

Information security governance

Documentation & reporting

Strong writing & editing

Education

Bachelor's degree in Cybersecurity or related field

Tools

Jira

ServiceNow

GRC platforms

Job description

Job Classification: Technology - Information Security

Are you interested in building capabilities that enable the organization with innovation, speed, agility, scalability and efficiency? The Global Technology team takes great pride in our culture where digital transformation is built into our DNA! When you join our organization at Prudential, you'll unlock an exciting and impactful career - all while growing your skills and advancing your profession at one of the world's leading financial services institutions.

As the Lead, Information Security Regulatory & Compliance Support, you will support Prudential's Information Security Governance function by coordinating responses to regulators, examiners, auditors, and other internal and external stakeholders across the enterprise. Reporting to Vice Present, Information Security Governance, you will support the intake, tracking of engagements, evidence collection and coordination, response development, and submission readiness activities.

This role helps the Information Security Office communicate with one voice, maintain a strong culture of accountability and regulatory readiness, and ensure governance practices remain practical, sustainable, and aligned to business and regulatory expectations.

This role is based in our office in Newark, NJ. Our organization follows a hybrid work structure where employees can work remotely and from the office, as needed, based on demands of specific tasks or personal work preferences. This position is hybrid and requires your on-site presence on a reoccurring weekly basis at least 3 days per week.

Here is What You Can Expect on a Typical Day

• Coordinate responses to regulatory examinations, audits, assessments, and information requests, driving cross-functional collaboration to ensure timely, accurate, and consistent submissions.
• Maintain a centralized tracker and auditable submission record (due dates, owners, approvals, evidence, final responses); elevate issues and clear blockers.
• Partner with business and technology teams, control owners, and SMEs to collect, validate, and asses supporting evidence for completeness, traceability, and alignment with requirements
• Assist in preparing leaders and SMEs for regulatory interactions, audits, interviews, and walkthroughs.
• Develop briefing materials, status updates, FAQs, anticipated questions, and supporting documentation.
• Support tracking and reporting of regulatory observations, audit findings, management action plans, and remediation commitments.
• Monitor trends, recurring requests, and emerging themes to improve readiness and reduce operational friction.
• Maintain evidence repositories, playbooks, and templates; identify opportunities to improve workflows, submission quality, and operational efficiency

The Skills & Expertise You Bring

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Security, Risk Management, Business, Communications, or a related field, or equivalent experience.
• Experience supporting regulatory exams and/or audit responses in a regulated environment (financial services preferred), including evidence collection, drafting, approvals, and stakeholder coordination
• Strong working knowledge of financial services regulatory and industry frameworks, including NYDFS 23 NYCRR 500, FFIEC, ISO 27001, SOC 1 & 2, or similar standards, and experience supporting evidence collection, documentation reviews, and response development.
• Strong grasp of information security governance and controls, with the ability to translate technical implementations into clear, defensible narratives and evidence packages
• Operational excellence and program discipline: run repeatable processes, manage to SLAs, maintain clean trackers, and drive closure across concurrent engagements
• Strong partnership skills with Legal, Compliance, Risk, Internal Audit, and technology teams, including navigating sensitive topics, managing approvals, and aligning to enterprise positions
• Experience maintaining examination, audit, or compliance tracking processes, including evidence repositories, action item management, metrics, reporting, and documentation standards.
• Excellent writing and editing skills: synthesize complex inputs into clear, consistent, regulator/auditor-ready responses with appropriate precision and traceability
• Strong judgment and attention to detail; comfortable with ambiguity, tight deadlines, and high scrutiny while maintaining appropriate governance

Preferred Qualifications

• Experience with GRC platforms, policy management tools, Jira, ServiceNow, or collaboration tools.
• Familiarity with core security domains such as IAM, ASM, CDR, cloud security, third-party risk, or data protection.
• CISSP, CISM, CRISC, CISA, or equivalent certifications.
• Knowledge of NJ DOBI (New Jersey Department of Banking and Insurance)

NIST - Information Security Framework

ISO 27001 / ISO 27000 Series

You'll Love Working Here Because You Can

Join a team and culture where your