Your Team 

Are you interested in building capabilities that make Information Security easier to understand, adopt, and execute? As part of Prudential's Global Technology & Operations organization, the Information Security team is strengthening its governance capabilities to improve visibility into security risk, policy adoption, and program execution across the enterprise. 

As the Lead, Information Security Policy & Enablement, you will serve as the primary bridge between Information Security's Secure Governance Office and business, product, technology, and corporate functions. Reporting to the Director of Information Security Governance, you'll help shape how security policies, standards, and guidance are communicated, understood, and adopted across the enterprise. Partnering with security advisors, Risk Management, Compliance, Legal, Internal Audit, Product, Engineering, and business stakeholders, you'll transform security requirements into practical guidance that helps teams confidently make security part of how they work every day.  

This role is based in our office in Newark, NJ. Our organization follows a hybrid work structure where employees can work remotely and from the office, as needed, based on demands of specific tasks or personal work preferences. This position is hybrid and requires your on-site presence on a reoccurring weekly basis at least 3 days per week. 

Here is What You Can Expect on a Typical Day 

Drive Stakeholder Engagement 

• Partner with security, technology, product, business, risk, compliance, legal, audit, and communications teams to align policy updates and adoption strategies. 

• Gather stakeholder feedback and translate security requirements into practical, actionable expectations. 

• Build trusted partnerships across Information Security, business, technology, risk, compliance, legal, and audit teams to drive alignment and successful outcomes.  

Lead Change, Communications & Adoption 

• Develop communication and change management strategies that increase awareness and adoption of security policies and standards. 

• Create stakeholder communications, FAQs, implementation guidance, talking points, and readiness materials. 

• Drive alignment and adoption through coordinated engagement, clear communications, and collaboration with awareness and education teams. 

• Track adoption trends and stakeholder feedback to continuously improve program effectiveness.  

Enable Policy Adoption & Stakeholder Readiness 

• Build reusable toolkits, templates, and engagement playbooks that support consistent policy implementation. 

• Translate complex security priorities, policy requirements, and governance expectations into practical guidance for technical, operational, and executive audiences. 

• Help stakeholders understand not just what is changing, but why it matters and how it supports broader business objectives. 

The Skills & Expertise You Bring 

• Bachelor's degree or equivalent experience in Cybersecurity, Information Security, Risk Management, Business, Communications, a related field or equivalent experience 

• Experience supporting information security governance, policy management, compliance programs, or technology risk initiatives. 

• Working knowledge of security and risk frameworks such as NIST, ISO 27001, FFIEC, NYDFS, SOC, or similar standards. 

• Ability to translate complex security concepts, risk priorities, governance expectations, and control obligations into clear, practical guidance for diverse audiences. 

• Strong communication, change management, and stakeholder engagement skills. 

• Experience influencing across technology, business, risk, compliance, and audit organizations. 

• Working knowledge in one or more security domains such as IAM, ASM, CDR, cloud security, third-party risk, or data protection. 

Preferred Qualifications 

• Experience within an Information Security, Technology Risk, BISO, Security Advisory, or Governance function. 

• Experience developing enablement materials,  policy adoption metrics, communications strategies, adoption programs, or learning content. 

• Experience supporting audits, regulatory examinations, or governance forums. 

• Familiarity with GRC platforms, policy management tools, Jira, or ServiceNow. 

• CISSP, CISM, CRISC, CISA, Prosci, or similar certifications.