Position Details
About this role
Executive-level information security leader responsible for enterprise risk, governance, and compliance across a nonprofit organization, aligning security controls with regulatory requirements and acquisition readiness.
Key Responsibilities
- Design and maintain enterprise information security control frameworks
- Define policy architecture and cross-domain control requirements
- Lead enterprise risk taxonomy and risk scoring
- Oversee risk register governance and reporting
- Lead and manage enterprise IT internal audit function
- Develop and execute risk-based internal audit plans
- Conduct independent assessment of control effectiveness
- Present findings to executive leadership
Technical Overview
Leads the design of enterprise security control frameworks and policy architecture; oversees internal audit and assurance activities; governs AI, privacy, and vendor risk across distributed teams; interfaces with external auditors.
Ideal Candidate
The ideal candidate is an executive-level information security leader with a track record of building and maturing enterprise security and compliance programs (SOC 2 Type II, ISO 27001, HIPAA), leading internal audits, and guiding governance aligned to organizational growth and risk reduction.
Must-Have Skills
Nice-to-Have Skills
Required Skills
Hard Skills
Soft Skills
Certifications
Preferred
Industry & Role
Keywords for Your Resume
Deal Breakers
Lack of 10+ years in information security/risk/compliance, Inability to lead external audits or internal audits, No experience with SOC 2 Type II or ISO 27001
Get matched to jobs like this
Luna finds roles that fit your skills and career goals — no endless scrolling required.
Create a Free Profile