Remote Senior Information Security Assurance Leader

Thrivent; United States; Remote; USD 146,000 - 198,000; Full time

Job summary

Thrivent seeks a Manager, Information Security Assurance Services to lead the design, build, and maturation of our assurance program in the United States. You will scale governance, controls, PCI DSS, and regulatory readiness while driving automation and efficiency across Assurance Services products and services.

You will manage a multi-disciplinary team, collaborate with business, technology, and regulators, and translate risk into structured roadmaps, OKRs, and tangible security improvements

Qualifications

• Minimum 10 years of progressive experience across GRC, information security, technology risk, internal/external audit, controls, cybersecurity assurance, or closely related disciplines.
• Minimum 5 years of direct people leadership experience, including coaching, performance management, workforce planning, and talent development.
• Demonstrated experience operating within or directly supporting PCI DSS environments, including scope definition, control design, testing, remediation, evidence management, and QSA/ISA interaction.
• Strong working knowledge of governance and control frameworks including NYDFS Part 500, NIST Cybersecurity Framework, CIS Controls, and PCI DSS, with the ability to design and defend control rationale to auditors and regulators.
• Demonstrated experience designing, testing, and remediating IT general controls (ITGCs) and application-level controls.
• Proven ability to communicate complex risk and control topics clearly to executive audiences, audit committees, regulators, and cross-functional stakeholders.
• Bachelor's degree in Information Security, Computer Science, Information Systems, related discipline, or equivalent professional experience.

Responsibilities

• Lead governance, controls design, testing, audits, and policy governance across assurance domains.
• Drive automation and evidence management across assurance services.
• Oversee PCI DSS program including scope, strategy, and ROC readiness.
• Manage third-party risk management and TPRM processes.
• Partner with regulators and business to align controls with risk tolerance.
• Develop and mentor a multi-disciplinary assurance team.
• Define KPIs/KRIs and deliver board-ready dashboards.

Skills

Strategic ownership

Executive presence

Decision ownership

Talent multiplier

Outcome bias

Hands-on when needed

Education

Bachelor's degree in Information Security or related field

Tools

ServiceNow IRM

Archer

AuditBoard

OneTrust

MetricStream

Job description

Thrivent seeks a Manager, Information Security Assurance Services to lead the design, build, and maturation of our assurance program in the United States. You will scale governance, controls, PCI DSS, and regulatory readiness while driving automation and efficiency across Assurance Services products and services.

You will manage a multi-disciplinary team, collaborate with business, technology, and regulators, and translate risk into structured roadmaps, OKRs, and tangible security improvements