Senior Cybersecurity & Governance Leader

ESP Enterprises Inc.; The Woodlands (TX); On-site; USD 150,000 - 210,000; Full time

Job summary

ESP Enterprises Inc. is seeking a Senior Manager, Cybersecurity, to define and execute the organization’s cybersecurity, governance, and compliance strategy.

You will lead security operations, drive compliance programs, and align security with regulatory requirements to protect information assets. You will collaborate with IT, business units, auditors, and compliance teams to build a unified governance model addressing risk, data protection, and enterprise posture maturity.

Qualifications

• 8+ years of experience in cybersecurity, security governance, or risk management roles.
• Minimum 4 years in a leadership or managerial role.
• Certifications such as CISSP, CISM, CRISC, CGEIT are preferred.
• Demonstrated success driving enterprise security, risk, and compliance programs.
• Experience collaborating with auditors and managing cross-functional initiatives.

Responsibilities

• Align cybersecurity, governance, and compliance programs with business goals and risk appetite.
• Develop and institute holistic security, risk, and compliance objectives and performance metrics.
• Define and enforce enterprise-wide security and compliance policies, standards, and architectures.
• Review and advise on proposed IT and business projects to identify risks early in the lifecycle.
• Establish guiding principles for flexible, scalable, and risk-aligned security governance.
• Classify and valuate enterprise data assets and ensure appropriate protection controls.
• Develop, communicate, and maintain multi-year cybersecurity and risk mitigation strategies.
• Lead the deployment of integrated security toolsets (e.g., SIEM, vulnerability management, identity governance).
• Oversee security architecture design aligned with frameworks such as NIST, ISO 27001, and Zero Trust.
• Manage daily IT security operations, including security monitoring, threat detection, and incident response.
• Lead vulnerability assessments, penetration testing, auditing, and remediation activities.
• Track, measure, and report the organization’s security and risk posture.
• Oversee centralized logging, automation of internal controls, and unified security event management.
• Plan, manage, and validate risk mitigation and remediation projects.
• Liaise with internal and external audit teams; schedule and manage periodic audit reviews.
• Ensure adherence to regulatory requirements (e.g., GDPR, HIPAA, SOX, NIST, ISO 27001).
• Lead cross-functional incident response activities and oversee lessons-learned documentation.
• Evaluate and implement Agentic AI use cases for repeatable security tasks such as alert triage, control testing, audit evidence preparation, vulnerability prioritization, and policy compliance reminders.
• Conduct enterprise risk assessments and drive mitigation plans for emerging risks.
• Oversee enterprise governance programs, ensuring policy adoption and continuous improvement.
• Develop and Manage cybersecurity & IT risk/compliance awareness programs, ensuring staff are trained on risks and responsibilities.
• Establish and monitor governance for Agentic AI systems, including approved use cases, human oversight, data protection, access controls, auditability, and responsible AI guardrails.
• Lead and mentor a team of cybersecurity and governance professionals.
• Provide timely and actionable reporting to senior leadership on risks, incidents, KPIs, and program maturity.
• Partner with IT teams, business units, and executive stakeholders to embed security into all technology initiatives.
• Manage vendor relationships for security, governance, and compliance tools and services.

Skills

Leadership

Governance

Risk management

Regulatory alignment

Security governance

Communication

Stakeholder management

AI automation awareness

Analytical thinking

Education

Bachelor's degree in Cybersecurity/IT/CS

Master's degree preferred

Tools

SIEM

Vulnerability management

Identity governance

Job description

ESP Enterprises Inc. is seeking a Senior Manager, Cybersecurity, to define and execute the organization’s cybersecurity, governance, and compliance strategy.

You will lead security operations, drive compliance programs, and align security with regulatory requirements to protect information assets. You will collaborate with IT, business units, auditors, and compliance teams to build a unified governance model addressing risk, data protection, and enterprise posture maturity.