IS Information Security Governance Manager

This Position reports to: Info Security Governance & Strategy Mgr

• The Information Security Governance Manager is a critical leadership role responsible for establishing, maturing, and overseeing the organization''s comprehensive information security governance framework
• This role ensures that information security objectives are strategically aligned with overall business goals and that all security functions operate within a structured, accountable, and continuously improving environment
• The Governance Manager acts as the orchestrator of security operations, providing the necessary oversight and coordination without directly executing the operational functions of other security groups
• The work model for the role is #LI #Onsite
• This role is contributing to the entire ABB globally
• Main stakeholders are Security risk and compliance group, CISO, Business Infosec & compliance teams,
• You will be mainly accountable for:

Lead and mature ABBs global information security governance framework, ensuring strategic alignment with business goals. Provide oversight and coordination across security functions without direct operational execution.

Key Responsibilities:

• Governance Framework: Develop and refine a governance model aligned with NIST CSF, ISO 27001, COBIT, and organizational risk appetite.
• Program Oversight: Monitor effectiveness of security functions (Risk, Compliance, SOC, Training, Tech Ops) using KPIs/KRIs. Lead governance forums and report to leadership.
• Strategic Alignment:Translate security strategy into governance requirements and integrate InfoSec governance into enterprise decision-making.
• Policy & Standards: Ensure clear definition, communication, and adherence to security policies. Oversee policy lifecycle and compliance reporting.
• Risk Management: Integrate risk processes into governance, manage risk acceptance/escalation, and ensure visibility at appropriate levels.
• Compliance Oversight:Align regulatory requirements with governance and oversee reporting to internal and external stakeholders.
• Continuous Improvement: Drive maturity initiatives and adoption of best practices across the governance structure.