> Markdown version of [/jobs/ext/1982944-director-cyber-security-policy-and-controls-governance](https://www.wearedevelopers.com/jobs/ext/1982944-director-cyber-security-policy-and-controls-governance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Director Cyber Security Policy and Controls Governance - **Company:** Humana Inc. - **Location:** Colorado Springs, CO, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cloud Computing, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Data Security, IT Management, Coupa Supplier Portal, Cloud Services, Systems Integration, IT Architecture, Information Technology - **Published:** August 8, 2026 - **Apply:** https://www.employmentcrossing.com/job/id-67b18ef00ac5a1324f8d2c1788b33499 ## About the Role Builds Trust: Strong team player who consistently models and inspires high levels of integrity, lives up to commitments and takes responsibility for the impact on one's actions. Requires little to no instruction on day-to-day work. Leads Change: Guides and energizes others, models adaptability and inspires strong organizational performance through periods of transformation, ambiguity and complexity. Communication: Ability to interact and effectively communicate complex topics to all levels of management within and outside of the organization. Understand the needs and perspectives of others and tailors delivery accordingly. Accountability: Exercises independent judgment / decision making on complex issues. Competent to work independently, meet established expectations and take responsibility for achieving results, and ensures direct reports to do the same. Role Essentials: Bachelor's degree in Cyber Security, Computer Science, Information Technology or a related field 8 or more years of progressive leadership in an Information Security or IT leadership position Experience with Governance Risk and Compliance technologies and their implementation Experience working with control frameworks such as HITRUST CSF, NIST CSF, NIST 800-53, CSA-CCM Proven experience in developing and implementing control governance processes Strong experience in designing and managing security policies and controls. Experience integrating Cyber Security technologies with existing technologies including cloud services Strong ability to assess urgency and prioritization and make good decisions based upon situational circumstances Excellent communication skills with the ability to influence others Must be passionate about contributing to an organization focused on continuously improving governance and compliance management Role Desirables: Experience in all aspects of control governance from a previous role. Strong knowledge of key compliance and IT frameworks such as: CSA-CCM, PCI, HITRUST, SOC1, SOC2, HIPAA, COBIT, ITIL. Cloud service experience Master's Degree preferred Professional certifications such as CISA, CISSP, CRISC, CGEIT, Cloud certifications such as CCSP, CCSK, CSP-based certifications) preferred. Ability to interpret and understand business needs and convey such issues to information security teams. ## Description The Director, Cyber Security Policy and Standards will lead the Policy and Control Governance team within Enterprise Information Protection. This area develops and manages governance processes and standards to ensure that IT and cyber security standards, architecture/designs, plans, controls, processes, and procedures align with policy and control requirements. The Director role oversees the complete policy life cycle management process, cloud control governance, core control governance, and control review services. This role will drive the development and companywide implementation of control governance standards utilizing existing control frameworks. Control governance standards will guide enterprise wide IT and business processes on security control requirements to enable business and IT goals and to align with compliance and risk processes. Responsibilities Key Responsibilities The Director ensures that security policies and controls are aligned with regulatory requirements and industry best practices and support business and IT strategic goals. Essential tasks include the development, implementation and management of control governance standards for Information Security and IT architecture designs, plans, controls, processes. The role will be responsible for control review and guidance services including enterprise level control recommendations and risk assessment. The Director leads a team of security policy and control professionals and ensures the development of individual skill sets and growth paths. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)