> Markdown version of [/jobs/ext/3988029-information-security-governance-analyst](https://www.wearedevelopers.com/jobs/ext/3988029-information-security-governance-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Governance Analyst

- **Company:** Manpower
- **Location:** San Mateo, CA, United States
- **Experience:** Expert
- **Salary:** $166,400 - $176,800
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cyber Security, Intrusion Detection and Prevention, Network Routers, Large Language Models, Software Security, Firewalls (Computer Science), National Institute of Standards and Technology Cybersecurity Framework, Information Technology, Vulnerability Analysis
- **Published:** October 28, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3477627872&tx=HT7872THT&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* 5+ years of experience conducting security control assessments or audits (L5 candidates expected to have 8+ years of relevant experience).
 * 5+ years of experience with information security standards and privacy laws (e.g., ISO 27001, NIST, GDPR, CCPA, CPRA) (L5 candidates expected to have 8+ years of relevant experience).
 * Strong knowledge of GRC frameworks and tools, with the ability to apply them to real-world compliance and audit activities.
 * Proficiency in risk assessment methodologies and tools, including comparative risk assessments to evaluate solution impact.
 * Comfort working with security management tools and technologies, including LLMs/AI/ML, vulnerability scanners, file integrity monitoring, configuration monitoring, and perimeter technologies (e.g., routers, firewalls, web proxies, intrusion prevention).

## Description

* Develop and implement security management systems that track objectives and controls across the organization.
 * Plan and lead organization-wide security audits to ensure compliance with policies, standards, and frameworks such as NIST 800-53, NIST CSF 2.0, and ISO 27001.
 * Coordinate internal and external audits with IT, Product Security, and other departments to ensure consistent evidence and outcomes.
 * Prepare, review, and maintain compliance documentation, ensuring it remains accurate, current, and audit-ready.
 * Conduct risk exposure assessments, prioritize risks by impact and likelihood, and support remediation planning based on security ROI considerations., * Opportunity to strengthen information security governance by aligning controls, policies, and audits to recognized frameworks.
 * Hands-on involvement in risk assessments and remediation planning that directly improve security posture.
 * Cross-functional collaboration with IT, Product Security, internal auditing, and other departments to meet internal and external requirements.
 * Exposure to compliance frameworks including NIST 800-53, NIST CSF 2.0, ISO 27001, and ISO 21434.
 * A role built for candidates who enjoy structured problem-solving, documentation rigor, and continuous improvement.

Upon completion of waiting period consultants are eligible for:

 * Medical and Prescription Drug Plans
 * Dental Plan
 * Vision Plan
 * Health Savings Account
 * Health Flexible Spending Account
 * Dependent Care Flexible Spending Account
 * Supplemental Life Insurance
 * Short Term and Long Term Disability Insurance
 * Business Travel Insurance
 * 401(k), Plus Match
 * Weekly Pay