Remote Cybersecurity Governance Strategist

Remote; San Francisco (CA); Remote; USD 150,000 - 190,000; Full time

Job summary

Remote is seeking a Senior Cybersecurity Governance Consultant to develop and improve the organization’s governance framework, strategy, roadmap, policies, and standards. The role will manage the cybersecurity control library and MBSS, coordinate policy approvals and exception processes, and maintain documentation for audits and regulatory reviews.

The consultant will work across business and technical teams and provide governance reporting and insights to senior management.

Qualifications

• 8-10 years of experience in cybersecurity governance.
• Experience drafting, reviewing, and managing approval cycles for policies, standards, procedures, and guidelines.
• Experience developing and maintaining a cybersecurity control library aligned with regulatory and business requirements.
• Familiarity with MBSS and updating baseline requirements and templates.
• Experience managing policy exceptions, waivers, and risk acceptance processes with documentation.

Responsibilities

• Facilitate policy exception management processes and ensure documentation for approved exceptions is maintained.
• Develop and continuously improve the organization's cybersecurity governance framework, strategy, and roadmaps.
• Manage approval cycles for cybersecurity policies, standards, frameworks, procedures, guidelines, and governance artifacts.
• Maintain the Cybersecurity Control Library to align with governance, regulatory, and business needs.
• Review MBSS updates, develop templates, and drive continuous enhancement.
• Ensure governance artifacts and records are ready for audits, assessments, and regulatory reviews.
• Prepare governance reports, dashboards, and executive briefings for senior management and governance committees.
• Develop and monitor cybersecurity governance KPIs and KRIs.
• Coordinate with Infrastructure, Quality, Legal, and Business units during governance development and approvals.
• Manage governance communications across internal stakeholders.
• Support awareness initiatives related to cybersecurity governance and responsibilities.
• Drive continuous improvement to enhance governance effectiveness and organizational maturity.

Skills

Governance frameworks

Policy management

Executive reporting

Stakeholder coordination

KPI tracking

Audit readiness

Job description

Remote is seeking a Senior Cybersecurity Governance Consultant to develop and improve the organization’s governance framework, strategy, roadmap, policies, and standards. The role will manage the cybersecurity control library and MBSS, coordinate policy approvals and exception processes, and maintain documentation for audits and regulatory reviews.

The consultant will work across business and technical teams and provide governance reporting and insights to senior management.