College Board

Senior Director, Governance and Risk

Remote - USA · Director · Full-time

Sponsorship not specifiedDetected 12 days ago

ComplianceProcess ImprovementProcurementLeadershipCommunicationCollaborationMentoringCISSP

About the role

The Information Security Governance Risk and Compliance (ISGRC) team at the College Board works closely with other teams across the organization to assess and certify the security of College Board's information systems and processes.
As the Senior Director, Information Security Governance & Risk, you will operationalize the vision set in collaboration with other Senior Team members and approved by Executive Leadership.
The Senior Director will oversee delivery across Security Policy, Security Awareness, Business Continuity, Vendor Risk Management, and the Information Security Risk Register.

Drive consistency in governance practices across the organization.
Track and drive remediation of identified gaps.
Ensure the team maintains an accurate and actionable Information Security Risk Register.
Drive accountability for timely risk remediation and escalation.
Support development of risk reporting for senior leadership consumption.
Develop risk language for state contracts.

All CB employees are required to occasionally travel to meet in person for business purposes.

8-10+ years of progressive experience leading Governance and Risk functions.
CRISC certification required.
All other security certifications (e.g., CISM, CISSP) optional and preferred.
Bachelor's degree required.
Preference will be given to advanced degree s.
Exceptional written and verbal communication skills, with the ability to explain complex security risks, audit findings, and control gaps to both technical audiences and senior leadership in a clear, concise manner.
Strong planning, prioritization, and execution skills, capable of managing multiple concurrent audit timelines, remediation efforts, and control dependencies in fast-paced, evolving environments.
A strategic and inclusive leadership

This dedicated team facilitates information security governance and compliance by assessing College Board's vendors, reviewing and negotiating contractual commitments to information security, planning for disaster response and recovery, testing system strength using industry-recognized frameworks (ISO 27001, PCI-DSS and SOC2) and obtaining related compliance certifications, implementing information security policies, promoting security awareness and training, and testing the acumen of College Board employees through robust and innovative training and phishing campaigns.
About the Opportunity
Your role is to ensure execution of Governance and Risk functions through a team of practitioners.
You will work closely with stakeholders from Legal, Procurement, Information Security Office, Privacy, and Business Stakeholders.

This listing is sourced directly from College Board's careers page and normalized into a canonical job model.