Job Classification:
Technology - Information SecurityYour Team
Are you interested in building capabilities that make Information Security easier to understand, adopt, and execute? As part of Prudential's Global Technology & Operations organization, the Information Security team is strengthening its governance capabilities to improve visibility into security risk, policy adoption, and program execution across the enterprise.
As the Lead, Information Security GRC (Governance, Risk, and Compliance) Automation, you will help build and scale Prudential's automated control testing, monitoring, telemetry, and evidence capabilities. Reporting to the Director of Information Security Governance, you'll work across Risk Management, Technology, Audit, and Information Security to modernize how controls are monitored and reported. This role offers the opportunity to help shape a more automated, data-driven governance function that reduces manual effort and improves risk visibility across the enterprise.
This role is based in our office in Newark, NJ. Our organization follows a hybrid work structure where employees can work remotely and from the office, as needed, based on demands of specific tasks or personal work preferences. This position is hybrid and requires your on-site presence on a reoccurring weekly basis at least 3 days per week.
Here is What You Can Expect on a Typical Day
Build Automated Control Monitoring & Evidence Capabilities
Design and implement automated control testing, continuous monitoring, telemetry, and evidence collection capabilities that improve visibility into control effectiveness and reduce reliance on manual processes.
Translate control library requirements into scalable automation solutions, metrics, monitoring routines, and testing approaches that support risk-based governance and compliance objectives.
Identify opportunities to automate testing and evidence collection across the control environment, helping mature governance from periodic assessments to near real-time monitoring.
Ensure automated testing results, evidence, and supporting data to remain accurate, traceable, and audit-ready.
Build Integrated Governance Data & Technology Solutions
Establish and maintain connections across governance, risk, asset, technology, CMDB, and evidence platforms to create a scalable and connected governance ecosystem.
Partner with technology teams and control owners to onboard new evidence sources, improve data quality, and enhance traceability across controls, assets, risks, and reporting.
Design sustainable automation frameworks that support control monitoring, reporting, remediation tracking, and executive visibility across Information Security Governance.
Help establish the foundational data structures, taxonomies, and integration patterns required to scale future automation initiatives
Drive Governance Transformation & Operational Excellence
Partner closely with Library & Standards, Policy & Enablement, Business Intelligence, Risk Management, Internal Audit, and Technology teams to create an integrated governance capability that connects controls, standards, adoption, metrics, and executive reporting.
Lead continuous improvement of automation operating models, including intake, prioritization, testing, evidence collection, reporting, and governance workflows.
Develop scalable playbooks, standards, and operational routines that improve consistency, accelerate adoption, and enhance the effectiveness of automated control monitoring.
Influence cross-functional stakeholders to modernize governance practices, reduce manual effort, and drive a more data-driven approach to risk and control management across the enterprise
The Skills and Expertise You Bring
Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, or a related field, or equivalent practical experience.
Experience engineering security control automation, automated control testing, continuous monitoring, or evidence collection capabilities within a complex or regulated environment.
Strong understanding of security controls and the ability to interpret control intent, translate control requirements into technical specifications, and define acceptance criteria for automated solutions.
Deep knowledge of DevOps practices and delivery pipelines, including CI/CD, source control, testing, release management, and production implementation.
Hands-on experience with Azure DevOps and ServiceNow, including designing workflows, integrating platforms, and embedding control automation into technology delivery processes.
Experience defining and implementing API-based integrations between GRC, security, technology, asset, evidence, and reporting platforms.
Working knowledge of software development concepts and at least one scripting or programming language, with the ability to review code, troubleshoot integrations, and make targeted code changes when needed.
Ability to partner with control owners, Information Security teams, DevOps engineers, and technology organizations to design, test, deploy, and support reusable automation capabilities in production.
Ability to evaluate overlapping automation needs across security domains and establish shared, scalable capabilities rather than duplicative point solutions.
Strong analytical, communication, and stakeholder management skills, with the ability to lead technical working sessions and drive delivery across multiple workstreams.
Preferred Qualifications
Experience with ServiceNow Integrated Risk Management or comparable Governance, Risk, and Compliance platforms.
Experience implementing continuous controls monitoring, automated evidence collection, control-as-code, or policy-as-code capabilities.
Experience with additional DevOps and workflow technologies such as GitHub, Jenkins, Jira, or Power Automate.
Experience designing reusable APIs, integration patterns, automation frameworks, or shared services across multiple security or technology teams.
Experience supporting financial services, regulatory, audit, or compliance programs such as NYDFS, SOX/JSOX, SWIFT, CCPA, JFSA, SOC 1/2, ISO 27001, or similar requirements.
Certifications such as CISSP, CISM, CRISC, CISA, Azure, DevOps, or ServiceNow credentials.
#LI-Hybrid #LI-LR1
Prudential is required by state specific laws to include the salary range for this role when hiring a resident in applicable locations. The salary range for this role is from $114,500.00 to $188,900.00. Specific pricing for the role may vary within the above range based on many factors including geographic location, candidate experience, and skills.
- Market competitive base salaries, with a yearly bonus potential at every level.
- Medical, dental, vision, life insurance, disability insurance, Paid Time Off (PTO), and leave of absences, such as parental and military leave.
- 401(k) plan with company match (up to 4%).
- Company-funded pension plan.
- Wellness Programs including up to $1,600 a year for reimbursement of items purchased to support personal wellbeing needs.
- Work/Life Resources to help support topics such as parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health, and career development.
- Education Benefit to help finance traditional college enrollment toward obtaining an approved degree and many accredited certificate programs.
- Employee Stock Purchase Plan: Shares can be purchased at 85% of the lower of two prices (Beginning or End of the purchase period).
Eligibility to participate in a discretionary annual incentive program is subject to the rules governing the program, whereby an award, if any, depends on various factors including, without limitation, individual and organizational performance. To find out more about our Total Rewards package, visit Work Life Balance | Prudential Careers. Some of the above benefits may not apply to part-time employees scheduled to work less than 20 hours per week.
Prudential Financial, Inc. of the United States is not affiliated with Prudential plc. which is headquartered in the United Kingdom.
Prudential is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, ancestry, sex, sexual orientation, gender identity, national origin, genetics, disability, marital status, age, veteran status, domestic partner status, medical condition or any other characteristic protected by law.
If you need an accommodation to complete the application process, please email [email protected].
If you are experiencing a technical issue with your application or an assessment, please email [email protected] to request assistance.
Skills Required
- Bachelor's degree or equivalent experience in Cybersecurity, Information Systems, Computer Science, Risk Management or related field
- Experience implementing automated controls testing, continuous monitoring, evidence collection, or governance capabilities in a regulated environment
- Knowledge of security controls, testing methodologies, evidence management, and risk-based monitoring practices
- Understanding of technology delivery lifecycle including software development, DevOps, CI/CD, release management, and delivery processes
- Experience working with GRC platforms, APIs, ServiceNow or asset inventory data, workflow automation, integrations, or control reporting capabilities
- Ability to translate control library requirements into automated test scripts, telemetry, metrics, evidence routines, and executive-ready reporting
- Strong knowledge of Azure DevOps, Jira, GitHub, Jenkins, Power Automate, cloud platforms or related technologies
- Strong analytical, communication, and stakeholder management skills with ability to lead working sessions and drive resolution across workstreams
- Experience with ServiceNow IRM or similar GRC platforms
- Experience implementing continuous controls monitoring, automated evidence collection, or control-as-code approaches
- Experience integrating governance and compliance activities into technology delivery workflows
- Experience supporting financial services, regulatory, audit, or compliance programs (NYDFS, SOX/JSOX, SOC 1/2, ISO 27001, etc.)
- Certifications such as CISSP, CISM, CRISC, CISA, or ServiceNow credentials
- Experience developing automation playbooks, operating routines, intake processes, dashboards, adoption materials, or training content for governance or control capabilities
PGIM Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about PGIM and has not been reviewed or approved by PGIM.
-
Healthcare Strength — Health coverage includes comprehensive medical, dental, and vision options, complemented by behavioral health programs and wellness reimbursements. On-site fitness centers and health coaching further support physical and mental well-being.
-
Retirement Support — Retirement programs feature a 401(k) with company match and a company-funded pension, with access to an employee stock purchase program. Student loan repayment assistance and savings plans add to long-term financial support.
-
Wellbeing & Lifestyle Benefits — Work-life balance is reinforced by flexible/hybrid work options, paid holidays and sick allowances, and amenities like gym access, free parking, and an affordable cafeteria in some locations. Tuition reimbursement, commuter benefits, and broad work/life resources extend lifestyle support.
PGIM Insights
What We Do
PGIM, the investment management business of Prudential Financial, Inc.* is a multi-manager that delivers industry-leading strategies and solutions to clients. Each business maintains its own investment process and culture, allowing for a singular focus on delivering investment returns for clients. The PGIM businesses offer investors a wide range of investment strategies across asset classes and geographies, including public equities, public and private fixed income, commercial mortgages and real estate. Clients of PGIM can rely on superior long-term performance, risk management expertise and innovative products to help them realize a wide range of business objectives. In addition, PGIM uses its collective knowledge and business expertise to work with public, private and non-profit sector partners to create solutions that address critical social issues that have an enduring impact. *Prudential Financial, Inc. of the United States is not affiliated in any manner with Prudential plc, incorporated in the United Kingdom or with Prudential Assurance Company, a subsidiary of M&G plc, incorporated in the United Kingdom.
