> Markdown version of [/jobs/ext/2604054-cybersecurity-governance-manager](https://www.wearedevelopers.com/jobs/ext/2604054-cybersecurity-governance-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Governance Manager - **Company:** OneMain - **Location:** Baltimore, MD, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Word, Microsoft Excel, Artificial Intelligence, Cyber Security, Microsoft Office, Microsoft PowerPoint, Power BI, Cloud Platform System, Information Technology, Tools for Reporting - **Published:** August 1, 2026 - **Apply:** https://jobs.onemainfinancial.com/sys/apply/job/application/21631/98582129888 ## About the Role * Bachelor's Degree with a focus in Cybersecurity, Information Technology disciplines or equivalent experience. * Minimum of 5 - 7 yearsofexperience inplanning, designing,implementingand managingtechnology and cybersecurity governanceandcontrolsframeworkin the financial industry or other regulated industry. * Minimum 3 - 5 years in a leadership rolewith a strong ability to influence peers,leadersand team members at all levels and across functional lines. * In-depth knowledge of cybersecurity frameworks, such as NIST, SOC2,andCIS. * In-depth knowledge of cybersecurity laws and regulations, industry standards and best practicesincludingGLBA 501(b),NYDFSand PCI. * Excellent verbal and written communication and presentation skillswith the ability to prepare and deliver complex data in a way that is concise/understandable. * Strong organizational and program management skills. Ability to effectively respond to shifting priorities and assignments. * Sound analytical, problem solving andresearchskills. * Proficient incomputerskills in Microsoft Office suite - Word, Excel, and PowerPoint. * Familiarity withGRC, metrics, and reporting tools likeArcher,Anecdotes,Power BI, or equivalent software a plus. * Self-motivation with proven ability to be adaptable to a dynamic, fast-pacedwork environment with multiple priorities and strict timelines. ## Description What makes a Cybersecurity Governance Manager successful at OneMain? Check out the top traits we're looking for and see if you qualify. * Adaptable * Analytical * Curious * Entrepreneurial * Inventive * Problem Solver Culture * We foster an entrepreneurial spirit that's powered by a national brand - our teams are empowered to make a difference * We encourage teams to take ownership of initiatives in this fast-paced, innovative culture so they can drive solutions that stay ahead of customer needs * We prioritize teamwork and building in-person connections with each other, understanding that fostering a collaborative environment is the best way to support each other. * We promote avenues to allow team members to expand their professional capabilities and continuously develop skills, facilitating upward mobility and career progression I like working at OneMain because of the opportunity it provides. You get to work with a lot of talented people, a lot of motivation to better the lives of our customers and a lot of fun technology that you get to interact with on a daily basis. I feel like I have many different options that I can take on yearly., We are seeking aManagerof Cybersecurity Governance to join our dynamic teamreporting to theDirector of Cybersecurity Governance and Risk.This rolewillleadthedevelopmentof a comprehensive technology and cybersecuritygovernanceframework tailored to ouron-premiseandcloudenvironments. This role is critical in ensuring that our company'stechnology and cybersecuritypractices are compliant with regulatory requirements and industry standards, while alsoeffectivelyidentifyingrisks. Members of the Cybersecurity Governance team are motivated, detail-oriented, and thrive in a collaborative environment where they will add value to key business partners. This position will require you to be adaptive, willing to drive change and innovation, and work in a fast-paced environment requiring collaboration and the ability to organize and prioritize assignments. Responsibilities: * Establish andmaintainasecurity governance frameworkbased on the National Institute of Standards and Technology (NIST) Cybersecurity Frameworkto ensure effective oversight and accountability. * Oversee thetechnology and cybersecurity policy program, which includes policyand controldrafting,facilitatingcross-functional input,and enforcement of policies, procedures, and controls. * Maintain the company's technology and cybersecurity riskandcontrolsmatrix in alignment with multiple frameworks, including SOC2,CIS,PCI, NIST CSF,NIST 800-53, and NYDFS Part 500. * Leadtheannualenterprisetechnology and cybersecurity riskassessment. * Establish an automatedtechnology and cybergovernance risk and compliance (GRC) program to continuouslymonitorand report on technology and cyber risk and control effectiveness. * Lead the company's annual NYDFS Part 500 Cybersecurity self-assessment. * Oversee andfacilitatethe annual SOC2 audit and any exams and assessments focused on technology and cybersecurity controls from state examiners, regulators, and OneMain partners. * Educate,influenceandprovide clear directives for technology projects, either directly or through committees, to ensure the consistent application of policies,standardsand controlsacross all technology projects,systemsand services. * Partnerand coordinatewith the enterprise risk management team, internal audit, and otherfunctions withinthe cyber risk team to ensureappropriateoversightand management of cyber risks and controls in-line with OneMain's enterprise riskmanagementframework. * Partner with cybersecurity architects, engineers, andtechnologyoperations teams to ensuregovernance programsforaccess privileges,applications, cloud environments, asset management, artificial intelligence, and other technology functionsareimplementedandmaintainedaccording tocybersecuritystandardsand guidelines. * Lead a metrics and reporting program to measure the efficiency and effectiveness of the cybersecurity program for senior management providing insights,trendsand recommendations. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Beyond Dashboards: Fixing Text-to-SQL with Semantic RAG](https://www.wearedevelopers.com/videos/2036-beyond-dashboards-fixing-text-to-sql-with-semantic-rag) - [Developing the Rich Text Editor for DeepL.com](https://www.wearedevelopers.com/videos/1172-developing-the-rich-text-editor-for-deepl-com) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [From developer to manager – what does it take to become an engineering manager?](https://www.wearedevelopers.com/magazine/42-from-developer-to-manager-what-does-it-take-to-become-an-engineering-manager) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)