Senior Principal IT Security & GRC Leader

Amtrak; United States; Remote; USD 149,000 - 194,000; Full time

Benefits offered by this job

Health Insurance

401K with Employer Match

Paid Time Off

Rail Pass Privileges

Job summary

Amtrak is seeking an enterprise security leader to direct IT security strategy and programs across the organization. The role focuses on developing and implementing security policies, conducting risk assessments, and coordinating with business and IT leaders to protect information assets.

The position emphasizes incident response readiness, governance, and security program leadership, with a strong focus on compliance and business continuity across national operations.

Qualifications

• Bachelor’s Degree or equivalent combination of education, training and/or relevant experience.
• Plus 9 years of relevant work experience.

Responsibilities

• Set direction for enterprise-wide security projects, strategies, and policies, ensuring alignment with national and international standards.
• Develop, execute, and manage IT security across the organization, including architectural reviews, risk assessments, and handling high-level security issues.
• Oversee and maintain security standards, procedures, and guidelines; conduct business impact analyses and internal investigations of security violations.
• Interface with business and IT leaders, providing security briefings, consulting on data classification, and supporting application and infrastructure projects.
• Lead initiatives, including incident response preparedness, risk & control readiness, resilience metrics and reporting, compliance oversight, security programs, and business continuity and recovery readiness across the organizations.

Skills

IT security strategy

Vendor management

Security audits

Leadership

Security training

Education

Bachelor’s Degree or equivalent combination of education, training and/or relevant experience

Tools

Security frameworks

Job description

Amtrak is seeking an enterprise security leader to direct IT security strategy and programs across the organization. The role focuses on developing and implementing security policies, conducting risk assessments, and coordinating with business and IT leaders to protect information assets.

The position emphasizes incident response readiness, governance, and security program leadership, with a strong focus on compliance and business continuity across national operations.