Senior Manager Cybersecurity Governance & Assurance (Cybersecurity)

Location: Palo Alto, California, United States

Annual salary: $120,000–$260,000

Company

hirify.global is a large United States auto insurer and a member of the Berkshire Hathaway family of companies.

What you will do

• Own and mature the enterprise cybersecurity governance operating model, including forums, decision rights, accountability, and escalation paths.
• Lead the cybersecurity policy, standards, controls, exceptions, evidence, effectiveness monitoring, and remediation lifecycle.
• Translate regulatory and security requirements into actionable technology standards, engineering requirements, and a common enterprise control framework.
• Partner with Technology, Engineering, Legal, Privacy, Enterprise Risk, and Internal Audit to manage cyber risk, audits, regulatory examinations, and control remediation.
• Define governance KPIs, KRIs, compliance metrics, and executive business reviews covering control health, remediation, and emerging risks.
• Build, mentor, and lead a high-performing cybersecurity governance function while managing priorities, resources, change adoption, and performance.

Requirements

• 7+ years of progressive experience in cybersecurity governance, risk, and compliance, including at least 5 years leading teams and enterprise programs.
• Deep expertise in cybersecurity governance, control frameworks, risk management, regulatory compliance, and enterprise-scale governance transformation.
• Experience establishing or maturing governance and compliance capabilities in large, complex, multi-cloud, and hybrid environments.
• Working knowledge of application security frameworks and standards including ISO 27001, NIST 800-series, NIST CSF, NY DFS, CPPA/CPRA, PCI DSS, and SOX.
• Experience overseeing cybersecurity audits or regulatory examinations, strategic planning, roadmaps, priorities, and resource allocation.
• Bachelor’s degree in a related field or equivalent professional experience; CISSP, CISM, CISA, or CRISC is preferred.

Nice to have

• Experience with Microsoft Azure and AWS security controls.
• CISSP, CISM, CISA, or CRISC certification.

Culture & Benefits

• Personalized development programs, mentorship, and certification assistance.
• Inclusive and collaborative culture focused on shared success.
• Competitive pay, benefits, and flexibility supporting employee well-being.
• hirify.global will consider sponsoring a new qualified applicant for employment authorization.