Cybersecurity Governance Specialist - Program Manager
Houston, TX
Hybrid (3 days onsite)
Full-time position
No visa sponsorship is available
Salary + Bonus
The Cybersecurity Governance Specialist is responsible for developing, maintaining, and improving the security controls, governance processes, and protective measures that safeguard enterprise information systems. This role focuses on executing cybersecurity governance activities, ensuring compliance with internal policies and external regulatory frameworks, and enhancing the maturity of organizational security posture. The specialist evaluates risks, monitors compliance, strengthens governance operations, and contributes to the advancement of cybersecurity practices across the organization.
Key Responsibilities
- Oversee revisions and continuous improvement of governance controls across software applications, systems, and processes, including identity validation, access control, data management, and threat/malware monitoring.
- Recommend improvements to cybersecurity governance frameworks, operational models, and policy structure to reduce risk and improve effectiveness.
- Evaluate standards, tools, and knowledge requirements necessary for information security skill development and operational excellence.
- Collaborate cross-functionally (e.g., with BISOs, security champions, operations teams) to ensure alignment with governance requirements and process maturity.
- Support compliance initiatives by ensuring that controls, documentation, and processes adhere to Cybersecurity Policy Suite (CPS) and external frameworks such as NIST, ISO, and SOC.
Impact and Scope
- Leads and/or contributes deeply to functional project teams, and may participate in cross-functional initiatives spanning governance, operations, policy, and risk.
Core Knowledge areas:
- Deep understanding of cybersecurity governance frameworks and enterprise governance models.
- Strong knowledge of NIST CSF, ISO 27001/27002/27017, SOC 2, AICPA TSC, CIS Controls
- Working knowledge of security controls, identity governance, access management, threat/malware monitoring, and data protection.
- Ability to assess compliance performance and support audit‑readiness activities.
- Familiarity with security requirements for cloud environments (AWS, Azure, SaaS).
Skills:
- Ability to support to multi‑year governance transformation programs.
- Strong skills in risk analysis, issue tracking, and structured problem-solving.
- Effective at distilling complex cyber requirements for business audiences.
- Ability to evaluate the effectiveness of security controls and identify systemic improvements.
Education & Experience Recommended
- Four-year or Graduate Degree in Computer Science, Information Technology, Cybersecurity or any other related discipline or commensurate work experience or demonstrated competence.
- 7-10 years of work experience, preferably in cyber & IT security, or compliance roles.
Recommended certifications:
- Core Security Certifications: CompTIA Security +, (ISC)2 SSCP, or equivalent
- Governance and Compliance Certifications: CISA, CRISC or equivalent
- Cloud Security Certifications: CCSK, CCSP, AWS|Azure Security or equivalent
To apply, please email your resume to: alice@smart-itpeople.com with job title in subject line.