We are seeking a Manager of Cybersecurity Governance to join our dynamic team reporting to the Director of Cybersecurity Governance and Risk. This role will lead the development of a comprehensive technology and cybersecurity governance framework tailored to our on-premise and cloud environments. This role is critical in ensuring that our company's technology and cybersecurity practices are compliant with regulatory requirements and industry standards, while also effectively identifying risks.
Members of the Cybersecurity Governance team are motivated, detail-oriented, and thrive in a collaborative environment where they will add value to key business partners. This position will require you to be adaptive, willing to drive change and innovation, and work in a fast-paced environment requiring collaboration and the ability to organize and prioritize assignments.
Responsibilities:
Establish and maintain a security governance framework based on the National Institute of Standards and Technology (NIST) Cybersecurity Framework to ensure effective oversight and accountability.
Oversee the technology and cybersecurity policy program, which includes policy and control drafting, facilitating cross-functional input, and enforcement of policies, procedures, and controls.
Maintain the company’s technology and cybersecurity risk and controls matrix in alignment with multiple frameworks, including SOC2, CIS, PCI, NIST CSF, NIST 800-53, and NYDFS Part 500.
Lead the annual enterprise technology and cybersecurity risk assessment.
Establish an automated technology and cyber governance risk and compliance (GRC) program to continuously monitor and report on technology and cyber risk and control effectiveness.
Lead the company’s annual NYDFS Part 500 Cybersecurity self-assessment.
Oversee and facilitate the annual SOC2 audit and any exams and assessments focused on technology and cybersecurity controls from state examiners, regulators, and OneMain partners.
Educate, influence and provide clear directives for technology projects, either directly or through committees, to ensure the consistent application of policies, standards and controls across all technology projects, systems and services.
Partner and coordinate with the enterprise risk management team, internal audit, and other functions within the cyber risk team to ensure appropriate oversight and management of cyber risks and controls in-line with OneMain’s enterprise risk management framework.
Partner with cybersecurity architects, engineers, and technology operations teams to ensure governance programs for access privileges, applications, cloud environments, asset management, artificial intelligence, and other technology functions are implemented and maintained according to cybersecurity standards and guidelines.
Lead a metrics and reporting program to measure the efficiency and effectiveness of the cybersecurity program for senior management providing insights, trends and recommendations.
Qualifications:
Bachelor's Degree with a focus in Cybersecurity, Information Technology disciplines or equivalent experience.
Minimum of 5 - 7 years of experience in planning, designing, implementing and managing technology and cybersecurity governance and controls framework in the financial industry or other regulated industry.
Minimum 3 - 5 years in a leadership role with a strong ability to influence peers, leaders and team members at all levels and across functional lines.
In-depth knowledge of cybersecurity frameworks, such as NIST, SOC2, and CIS.
In-depth knowledge of cybersecurity laws and regulations, industry standards and best practices including GLBA 501(b), NYDFS and PCI.
Excellent verbal and written communication and presentation skills with the ability to prepare and deliver complex data in a way that is concise/understandable.
Strong organizational and program management skills. Ability to effectively respond to shifting priorities and assignments.
Sound analytical, problem solving and research skills.
Proficient in computer skills in Microsoft Office suite - Word, Excel, and PowerPoint.
Familiarity with GRC, metrics, and reporting tools like Archer, Anecdotes, Power BI, or equivalent software a plus.
Self-motivation with proven ability to be adaptable to a dynamic, fast-paced work environment with multiple priorities and strict timelines.
OneMain Holdings, Inc. is an Equal Employment Opportunity (EEO) employer. Qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship status, color, creed, culture, disability, ethnicity, gender, gender identity or expression, genetic information or history, marital status, military status, national origin, nationality, pregnancy, race, religion, sex, sexual orientation, socioeconomic status, transgender or on any other basis protected by law.
Skills Required
- Bachelor's degree in Cybersecurity, Information Technology, or equivalent experience
- Minimum 5-7 years planning, designing, implementing and managing technology and cybersecurity governance and controls in financial or regulated industry
- Minimum 3-5 years in a leadership role with ability to influence across functions
- In-depth knowledge of cybersecurity frameworks (NIST, SOC2, CIS)
- In-depth knowledge of cybersecurity laws, regulations and standards including GLBA 501(b), NYDFS and PCI
- Experience maintaining risk and controls matrix aligned to multiple frameworks (SOC2, CIS, PCI, NIST 800-53, NYDFS Part 500)
- Experience leading enterprise risk assessments, SOC2 audits, and regulatory self-assessments (e.g., NYDFS Part 500)
- Strong organizational and program management skills; ability to prioritize shifting assignments
- Excellent verbal and written communication and presentation skills
- Proficient with Microsoft Office (Word, Excel, PowerPoint)
- Familiarity with GRC, metrics, and reporting tools like Archer, Anecdotes, Power BI or equivalent
- Self-motivation and adaptability to work in a fast-paced environment with multiple priorities and strict timelines
OneMain Financial Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about OneMain Financial and has not been reviewed or approved by OneMain Financial.
-
Retirement Support — Retirement benefits include a 401(k) with a dollar-for-dollar match up to 4% after six months, supporting long-term savings. An employee stock purchase plan with a 10% discount adds another ownership-oriented reward element.
-
Leave & Time Off Breadth — Time-off offerings include vacation that can grow to five weeks, paid holidays, personal days, sick time, and three paid volunteer days. Paid parental leave is offered at 100% pay for six weeks, adding to the overall leave mix.
-
Flexible Benefits — A broad menu of benefits spans HSAs/FSAs, disability coverage, life and long-term care solutions, tuition reimbursement, and voluntary options like pet insurance and legal assistance. Backup child/elder care and adoption assistance further widen the set of selectable supports.
OneMain Financial Insights
What We Do
OneMain provides personal loans with one on one, local service at branches nationwide. Our personalized loan solutions offer customers a simple and straightforward loan application, fixed rates, fixed payments, clear terms and multiple payment options.
