Lead, Information Security GRC Automation

Your Team

Are you interested in building capabilities that make Information Security easier to understand adopt and execute As part of Prudentials Global Technology & Operations organization the Information Security team is strengthening its governance capabilities to improve visibility into security risk policy adoption and program execution across the enterprise.

As the Lead Information Security GRC (Governance Risk and Compliance) Automation you will help build and scale Prudentials automated control testing monitoring telemetry and evidence capabilities. Reporting to the Director of Information Security Governance youll work across Risk Management Technology Audit and Information Security to modernize how controls are monitored and reported. This role offers the opportunity to help shape a more automated data-driven governance function that reduces manual effort and improves risk visibility across the enterprise.

This role is based in our office in Newark NJ. Our organization follows a hybrid work structure where employees can work remotely and from the office as needed based on demands of specific tasks or personal work preferences. This position is hybrid and requires your on-site presence on a reoccurring weekly basis at least 3 days per week.

Here is What You Can Expect on a Typical Day

Build Automated Control Monitoring & Evidence Capabilities

• Design and implement automated control testing continuous monitoring telemetry and evidence collection capabilities that improve visibility into control effectiveness and reduce reliance on manual processes.

• Translate control library requirements into scalable automation solutions metrics monitoring routines and testing approaches that support risk-based governance and compliance objectives.

• Identify opportunities to automate testing and evidence collection across the control environment helping mature governance from periodic assessments to near real-time monitoring.

• Ensure automated testing results evidence and supporting data to remain accurate traceable and audit-ready.

Build Integrated Governance Data & Technology Solutions

• Establish and maintain connections across governance risk asset technology CMDB and evidence platforms to create a scalable and connected governance ecosystem.

• Partner with technology teams and control owners to onboard new evidence sources improve data quality and enhance traceability across controls assets risks and reporting.

• Design sustainable automation frameworks that support control monitoring reporting remediation tracking and executive visibility across Information Security Governance.

• Help establish the foundational data structures taxonomies and integration patterns to scale future automation initiatives

Drive Governance Transformation & Operational Excellence

• Partner closely with Library & Standards Policy & Enablement Business Intelligence Risk Management Internal Audit and Technology teams to create an integrated governance capability that connects controls standards adoption metrics and executive reporting.

• Lead continuous improvement of automation operating models including intake prioritization testing evidence collection reporting and governance workflows.

• Develop scalable playbooks standards and operational routines that improve consistency accelerate adoption and enhance the effectiveness of automated control monitoring.

• Influence cross-functional stakeholders to modernize governance practices reduce manual effort and drive a more data-driven approach to risk and control management across the enterprise

#LI-Hybrid #LI-LR1