Director of Information Security Governance Risk and Compliance

DIRECTOR OF INFORMATION SECURITY GOVERNANCE RISK AND COMPLIANCE Company Overview: Gulf Copper LLC, a subsidiary of Davie Defense, is a leading Marine Repair and New Construction company based in Galveston, Texas, with more than 75 years of ship repair and fabrication experience on the Gulf Coast. Gulf Copper’s primary business is the repair and refurbishment of marine vessels, ship construction, and fabrication for transportation, government, and oil and gas markets. Benefits: 401 (k) Group Health & Dental Plan Short-& Long-Term Disability Insurance Life & Voluntary Life Insurance Holiday & Vacation Pay Employee Assistance Program. Position Summary: The Director, Information Security Governance, Risk and Compliance leads the organization’s information security governance, cyber and technology risk, security compliance, and assurance programs. Reporting to the CISO, the Director oversees the Information Security Management System, security policies and standards, cyber-risk management, control governance, assessments, customer assurance, and security-related remediation. The Director establishes a risk-based control and compliance program aligned with applicable requirements and frameworks, including NIST CSF, NIST SP 800-171, CMMC, DFARS, CIS Controls, ISO/IEC 27001, ITAR-related information-protection requirements, and contractual obligations. The role advises executive leadership on material cyber risk, control effectiveness, compliance, and audit readiness. The position partners with Legal, Contracts, Quality, Supply Chain, Human Resources, Internal Audit, Engineering, Operations, and other business functions. These functions retain ownership of their respective legal, contractual, quality, personnel, operational, and regulatory responsibilities. Essential Duties and Responsibilities: This position is responsible for the following: Other duties may be assigned. Information Security Governance & Cyber Risk Management: Advise the CISO and executive leadership on material cyber risk and compliance. Translate regulatory and contractual security requirements into risk-based business recommendations. Lead the Information Security GRC program and maintain the cyber and technology risk-management framework. Maintain risk registers and integrate material cyber and technology risks into the enterprise risk process. Lead risk assessments, treatment planning, exception management, and executive risk reporting. Develop and govern information security policies,...

Summary and match are AI-generated; verify details on the original posting.

Listed via Himalayas. All sources