This role pays less than
72%
of similar roles. Most pay
$151,475–$208,712
— the shaded band above.
At the midpoint, this role pays about
$152k
versus about
$180k
for comparable roles.
Based on 239 similar postings.
Employer
About Prudential Financial
Prudential Financial is a global financial services leader and premier active global investment manager.
Prudential Financial currently has
32 open roles
on FindRole.
Listed pay typically runs
$123,700–$202,050
across 32 roles with salary data.
Lead, Information Security Library & Standards joins the Global Technology & Operations team to strengthen information security governance and improve visibility into risk and policy adoption. This role focuses on building a scalable control library, maturing security standards, and establishing governance processes to ensure an audit-ready program. You will manage the lifecycle of security standards, define control taxonomies, and align internal requirements with frameworks like NIST, ISO 27001, FFIEC, NYDFS, and SOC. Day-to-day responsibilities include partnering with domain leaders in areas such as IAM, cloud security, data protection, and vulnerability management to translate complex requirements into actionable guidance. The ideal candidate possesses expertise in risk management, governance frameworks, and GRC tooling. You will utilize strong communication skills to collaborate across legal, audit, and technology teams to ensure consistent security execution across the enterprise.
Develop and maintain the enterprise Information Security control library including taxonomy, ownership models, and framework mappings.
Establish traceability between security standards, regulatory requirements, risk assessments, and evidence repositories.
Manage the full lifecycle of Information Security standards from creation and review to publication and retirement.
Align internal security controls with major frameworks such as NIST, ISO 27001, FFIEC, and NYDFS.
Support audits and regulatory examinations by providing clear control mappings and documentation.
Translate complex security requirements into practical guidance for business stakeholders and technical teams.
Create playbooks, templates, and training content to drive the adoption of security standards across the organization.
Improve governance processes and workflows based on stakeholder feedback and performance metrics.
What we're looking for
Bachelor's degree or equivalent experience in Cybersecurity, Computer Science, Information Security, Risk Management, Information Systems, Business, or a related field.
Experience building or maintaining security governance, control frameworks, compliance programs, or risk management initiatives.
Strong understanding of frameworks such as NIST, ISO 27001, FFIEC, NYDFS, SOC, or related standards.
Working knowledge of one or more security domains including IAM, Cloud Security, Data Protection, Vulnerability Management, Attack Surface Management, or Cyber Defense.
Experience designing governance processes, operating models, ownership structures, quality gates, lifecycle processes, and control documentation.
Strong communication, documentation, and stakeholder management skills.
Ability to collaborate effectively across security, risk, compliance, technology, business, and audit teams.
Experience with security control libraries, GRC tooling, audits, or certifications like CISSP, CISM, CRISC, or CISA (preferred).
GRC
CI/CD
Azure DevOps
ServiceNow
API
GitHub
Jenkins
Jira
Power Automate
Control-as-Code
Policy-as-Code
Cybersecurity
Information Security
Software Development
Scripting
Power BI
SQL
Microsoft Fabric
Microsoft Power Platform
Power Automate
Power Apps
Claude
Copilot
AWS
ServiceNow
Jira
Data Modeling
Data Visualization
Data Governance
KPI
KRI