Remote Principal InfoSec Engineer - Governance & Risk

FERGUSON; États-Unis; À distance; USD 118 000 - 207 000; Plein temps

Résumé du poste

Ferguson is seeking a Principal Information Security Engineer – Governance & Risk to advance enterprise cybersecurity risk and governance strategy. You will lead third‑party risk, CSF adoption, external posture, and risk reporting while partnering with Risk Management, Legal, and executives.

This fully remote role can be based anywhere in the United States, and requires collaboration across IT, Internal Audit, Procurement, and business leadership to drive measurable improvements in security

Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, Information Systems, Computer Science, Business Admin, or related field.
• 5+ years in Information Security, IT Risk Management, Compliance, IT Audit, Cybersecurity Governance, or related disciplines.
• Experience conducting security risk assessments and evaluating controls in on‑prem and cloud environments.
• Experience developing security policies, standards, and governance processes.
• Preferred certifications: CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Auditor/Implementer.

Responsabilités

• Lead enterprise cybersecurity risk assessments using the NIST CSF.
• Develop governance processes and performance metrics.
• Provide executive risk reporting and remediation guidance.
• Collaborate with technology and business teams to improve governance and risk management.
• Coordinate security roadmaps, audits, and risk reviews.

Connaissances

NIST CSF knowledge

Security risk assessment

Governance & risk management

Stakeholder communication

Risk analytics

Formation

Bachelor's degree in Information Security or related field

Description du poste

Ferguson is seeking a Principal Information Security Engineer – Governance & Risk to advance enterprise cybersecurity risk and governance strategy. You will lead third‑party risk, CSF adoption, external posture, and risk reporting while partnering with Risk Management, Legal, and executives.

This fully remote role can be based anywhere in the United States, and requires collaboration across IT, Internal Audit, Procurement, and business leadership to drive measurable improvements in security