Strategic Information Security Policy Lead (Hybrid)

RightClick; Connecticut; Hybrid; USD 120,000 - 160,000; Full time

Job summary

RightClick in Fairfield County, CT, seeks an Information Security Policy Manager to lead the development and continual improvement of information security policy across a global GRC function. You will translate complex regulatory concepts into clear language for business audiences.

This hybrid role is based in Fairfield County, CT. The ideal candidate writes clear policies grounded in risk management, brings 7+ years in cybersecurity with policy leadership in regulated environments, and

Qualifications

• 7+ years in information or cybersecurity experience.
• 3+ years managing security policy in regulated industry.
• 3+ years in hands-on technical roles.
• Strong understanding of cybersecurity regulations and frameworks.
• Ability to write clear, actionable policies grounded in risk concepts.
• Bachelor's degree or equivalent experience.
• GRC tooling experience and certification a plus.

Responsibilities

• Enhance and extend the information security policy library.
• Perform policy mapping and gap analysis for compliance.
• Develop and map controls and testing procedures.
• Evaluate security controls and recommend improvements.
• Support external assessments, audits, and regulatory examinations.
• Contribute to additional GRC initiatives as needed.

Skills

Cybersecurity experience

Policy management

Regulated industry

Policy writing

NIST CSF familiarity

Regulatory knowledge

Risk management

Education

Bachelor's degree in Information Security / CS / IT

Tools

GRC tooling

Job description

RightClick in Fairfield County, CT, seeks an Information Security Policy Manager to lead the development and continual improvement of information security policy across a global GRC function. You will translate complex regulatory concepts into clear language for business audiences.

This hybrid role is based in Fairfield County, CT. The ideal candidate writes clear policies grounded in risk management, brings 7+ years in cybersecurity with policy leadership in regulated environments, and