Strategic Cybersecurity Governance Lead

OneMain Financial; Baltimore (MD); On-site; USD 140,000 - 180,000; Full time

Job summary

OneMain Financial seeks a Manager of Cybersecurity Governance to lead the development of a comprehensive governance framework for on-premise and cloud environments. This role ensures regulatory compliance, risk identification, and alignment with industry standards while driving change across the organization.

You will oversee policy programs, risk assessments, and audits, partnering with risk and audit functions to enforce controls and reporting for senior leadership.

Qualifications

• Bachelor's degree in Cybersecurity or IT or equivalent experience.
• 5–7 years designing, implementing and managing technology and cybersecurity governance in regulated industries.
• 3–5 years in a leadership role with influence across peers and teams.
• In-depth knowledge of NIST, SOC2, and CIS.
• Familiarity with GLBA 501(b), NYDFS and PCI regulations.
• Excellent verbal and written communication and presentation skills.
• Strong organizational and program management skills.
• Analytical, problem solving and research skills.
• Proficient in Word, Excel, PowerPoint.
• Familiarity with GRC and reporting tools like Archer, Anecdotes, Power BI.

Responsibilities

• Establish and maintain a security governance framework based on NIST CSF.
• Oversee policy drafting, cross-functional input, and enforcement of policies and controls.
• Maintain risk and controls matrix aligned with SOC2, CIS, PCI, NIST CSF/800-53, NYDFS Part 500.
• Lead the annual enterprise technology and cybersecurity risk assessment.
• Establish an automated GRC program to monitor risks and control effectiveness.
• Lead the annual NYDFS Part 500 Cybersecurity self-assessment.
• Oversee the annual SOC2 audit and exams by regulators and partners.
• Educate and direct technology projects to ensure policy compliance.
• Coordinate with enterprise risk, internal audit, and cyber risk teams.
• Partner with architects/engineers/ops to implement governance for access, cloud, assets, and AI.
• Lead metrics and reporting for senior management with insights and trends.

Skills

Leadership

Influence

Communication

Presentation

Program management

Analytical thinking

Adaptability

Self-motivation

Cross-functional collaboration

Time management

Education

Bachelor's degree in Cybersecurity or IT

Tools

Archer

Anecdotes

Power BI

Job description

OneMain Financial seeks a Manager of Cybersecurity Governance to lead the development of a comprehensive governance framework for on-premise and cloud environments. This role ensures regulatory compliance, risk identification, and alignment with industry standards while driving change across the organization.

You will oversee policy programs, risk assessments, and audits, partnering with risk and audit functions to enforce controls and reporting for senior leadership.