Manager, Security Governance

Job description

Position Purpose: Supervise staff to improve the enterprise security programs based on compliance and risk drivers. Lead governance of enterprise security initiatives and create reports that will impact decisions made at both the executive and Board levels. Key Details: In this remote role, you will lead a team focused on building innovative, enterprise-scale Security GRC solutions while driving GRC technology transformation, process improvement, automation, and AI-enabled workflows. You’ll play a key role in Archer initiatives, with ServiceNow IRM experience also valuable, and partner across technology and security teams to solve complex governance and risk challenges. This highly visible role will provide insights and reporting that influence senior leadership and Board-level decisions, with the opportunity to shape the future of Security GRC at scale. Candidates must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Sponsorship and future sponsorship are not available for this opportunity, including employment-based visa types H-1B, L-1, O-1, H-1B1, F-1, J-1, OPT, or CPT. Support hiring, performance management, and career development of Security Governance staff to ensure alignment to defined goals. Prioritize and assign tasks to ensure appropriate risk-based security oversight across business units and security domains. Lead projects to improve and strengthen the enterprise security posture and reduce security risk including requirements collection, initiation, planning, execution, status reporting and closure. Maintain awareness of existing and proposed enterprise security policies and standards. Provide support in security policy and standard development. Identify regulatory changes that will affect information security policies, standards and procedures, and recommends appropriate changes. Support security control owners with control design and implementation Lead the design, evaluation and oversight of controls for key security and security IT projects, programs, applications and systems, e.g. the Enterprise Control Framework Lead activities related to the lifecycle of remediation activities including: delivery timeline tracking, action plan development, gathering and review of evidence artifacts, providing feedback regarding appropriateness of evidence artifacts, and development of documentation to submit for closure Prepare governance documentation for Senior Management including team, Board, and other reporting initiatives as needed. Continue to look for ways to improve processes and contributes to excellence in team. Leads complex projects, on time and on budget, escalating concerns and providing weekly updates. Develop and implement best practices regarding gathering, reporting and representation of security KPIs and KRIs to various stakeholders. Perform related duties as assigned or requested, including security metrics reporting and information security process improvements. Performs other duties as assigned Complies with all policies and standards. Education/Experience: Bachelor’s degree in Business, Information Technology, related field, or equivalent experience required. 4+ years of experience in security GRC, audit, compliance, and regulatory required. License/Certification: CISA, CGEIT, CRISC, or CISM required. CISSP preferred. Preferred Skills: Experience improving and automating Security GRC processes in partnership with technology teams. Hands-on experience with Archer migrations, implementations, or platform buildouts highly desired. Familiarity with ServiceNow IRM and other GRC technology platforms. Experience leveraging AI and automation to enhance GRC capabilities and workflows. Process improvement expertise using Six Sigma or similar methodologies. Pay Range: $107,700.00 - $199,300.00 per year At Centene, we connect people to the care they need to live healthier lives — and the work you do here makes that impact real every day. You’ll take on meaningful challenges that directly support individuals, families, and communities, building your skills while making healthcare more accessible and effective. It’s work with a purpose you can see, backed by a team committed to improving lives well beyond the workday. Centene offers a comprehensive benefits package including: competitive pay, health insurance, 401K and stock purchase plans, tuition reimbursement, paid time off plus holidays, and a flexible approach to work with remote, hybrid, field or office work schedules. Actual pay will be adjusted based on an individual's skills, experience, education, and other job-related factors permitted by law , including full-time or part-time status. Total compensation may also include additional forms of incentives. Benefits may be subject to program eligibility. Centene is an equal opportunity employer that is committed to diversity, and values the ways in which we are different. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other characteristic protected by applicable law. Qualified applicants with arrest or conviction records will be considered in accordance with the LA County Ordinance and the California Fair Chance Act