Associate Director of Information Security GRC

Feel Good About Doing Good

The Knights of Columbus is a tax-exempt Catholic fraternal benefit society that provides financial security to members and their families through our life insurance, long-term care insurance, disability income insurance, investment and annuity products. Charity is at the core of our missions: our profits are donated to help those in need and to support our faith - $1.73B over the past ten years.

While we have many employees who are not Catholic, we follow the Church’s teachings in our investment strategies and our employee benefits. As part of our religious mission, we support the pro-life cause by contributing to the March for Life and pregnancy resource centers, we oppose assisted suicide and euthanasia, we are evangelists for the Catholic faith, and we help Christians who are facing religious persecution in the Middle East. We all work together to support our two million members as they volunteer to help others in their parishes and communities around the world.

Share Your Talent. Live Your Purpose.

We are a growing and purpose-driven community of professionals. Join us to discover how you can meet your goals and ours!

#LI-Hybrid

Overview

The Associate Director of Governance, Risk, and Compliance (GRC) is a resourceful and experienced information security leader responsible for managing, and continuously improving, the organization’s information security GRC program. This position provides strategic direction and operational oversight for the organization’s information security governance framework, including the development and maintenance of security policies, standards, and procedures; coordination of security audits and assessments; management of information security risks and exceptions; oversight of third-party security risk; and delivery of meaningful program reporting to leadership and governance committees. The Associate Director ensures that the organization’s information security governance practices remain aligned with applicable regulatory requirements, contractual obligations, industry standards, and organizational risk objectives. This individual reports to, and works closely with, the Deputy CISO and partners across the organization with Enterprise Risk Management, Internal Audit, Legal, Privacy, Compliance, Information Technology, and other business leaders to promote effective governance, strengthen risk management, and support the continuous improvement of the information security program.

Core Responsibilities

• Lead, develop, mentor, and retain a high-performing Information Security GRC team.

• Establish team objectives, performance measures, responsibilities, and development plans.

• Develop, maintain, and continuously improve the organization’s information security governance, risk, and compliance strategy, operating model, and multi-year roadmap.