Lead, Information Security Policy & Enablement

Your Team

Are you interested in building capabilities that make Information Security easier to understand adopt and execute As part of Prudentials Global Technology & Operations organization the Information Security team is strengthening its governance capabilities to improve visibility into security risk policy adoption and program execution across the enterprise.

As the Lead Information Security Policy & Enablement you will serve as the primary bridge between Information Securitys Secure Governance Office and business product technology and corporate functions. Reporting to the Director of Information Security Governance youll help shape how security policies standards and guidance are communicated understood and adopted across the enterprise. Partnering with security advisors Risk Management Compliance Legal Internal Audit Product Engineering and business stakeholders youll transform security requirements into practical guidance that helps teams confidently make security part of how they work every day.

This role is based in our office in Newark NJ. Our organization follows a hybrid work structure where employees can work remotely and from the office as needed based on demands of specific tasks or personal work preferences. This position is hybrid and requires your on-site presence on a reoccurring weekly basis at least 3 days per week.

Here is What You Can Expect on a Typical Day

Drive Stakeholder Engagement

• Partner with security technology product business risk compliance legal audit and communications teams to align policy updates and adoption strategies.

• Gather stakeholder feedback and translate security requirements into practical actionable expectations.

• Build trusted partnerships across Information Security business technology risk compliance legal and audit teams to drive alignment and successful outcomes.

Lead Change Communications & Adoption

• Develop communication and change management strategies that increase awareness and adoption of security policies and standards.

• Create stakeholder communications FAQs implementation guidance talking points and readiness materials.

• Drive alignment and adoption through coordinated engagement clear communications and collaboration with awareness and education teams.

• Track adoption trends and stakeholder feedback to continuously improve program effectiveness.

Enable Policy Adoption & Stakeholder Readiness

• Build reusable toolkits templates and engagement playbooks that support consistent policy implementation.

• Translate complex security priorities policy requirements and governance expectations into practical guidance for technical operational and executive audiences.

• Help stakeholders understand not just what is changing but why it matters and how it supports broader business objectives.

The Skills & Expertise You Bring

• Bachelors degree or equivalent experience in Cybersecurity Information Security Risk Management Business Communications a related field or equivalent experience

• Experience supporting information security governance policy management compliance programs or technology risk initiatives.

• Working knowledge of security and risk frameworks such as NIST ISO 27001 FFIEC NYDFS SOC or similar standards.

• Ability to translate complex security concepts risk priorities governance expectations and control obligations into clear practical guidance for diverse audiences.

• Strong communication change management and stakeholder engagement skills.

• Experience influencing across technology business risk compliance and audit organizations.

• Working knowledge in one or more security domains such as IAM ASM CDR cloud security third-party risk or data protection.

Preferred Qualifications

• Experience within an Information Security Technology Risk BISO Security Advisory or Governance function.

• Experience developing enablement materials policy adoption metrics communications strategies adoption programs or learning content.

• Experience supporting audits regulatory examinations or governance forums.

• Familiarity with GRC platforms policy management tools Jira or ServiceNow.

• CISSP CISM CRISC CISA Prosci or similar certifications.