Information Security Manager – Governance, Risk, Compliance

GDS Group

Information Security Manager managing operational tasks for Governance, Risk, & Compliance in Sinclair’s Information Security program. Leading security-related team functions in a hybrid role.

Posted 5/29/2026full-timeHunt Valley • Maryland • 🇺🇸 United StatesMid-LevelSenior💰 $99,000 - $132,500 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloud

About the role

Key responsibilities & impact

Lead day-to-day operations including the Third-Party Risk Management program, while maintaining SLAs aligned with business requirements.
Communicate and prioritize the security team’s assignments while communicating and developing milestones according to leadership direction.
Provide mentorship and knowledge transfer to other security team members on technical solutions and risk assessments.
Lead, execute, and drive processes as they apply to projects and assignments.
Ability to think strategically, plan methodically, and execute tactically.
Act as an advocate for Information Security projects while identifying creative solutions to ensure progress is made.
Drive remediation activities by developing communication channels with key stakeholders.
Develop tactical roadmaps that align with departmental goals and objectives.
Produce frequent metrics and KPI’s that measure program status.

Requirements

What you’ll need

Bachelor’s degree in IT or security related discipline preferred, or 7 years of experience in lieu of a degree.
Active security certifications including CISSP, CISM, CGEIT, or other risk-based credentials.
5+ years of Information Security experience preferably in the private sector (broadcast experience a plus)
At least 1 year of experience in a manager or program manager role.
3+ years of experience executing tasks for Third-Party Risk Management, Data Privacy, policy development, and security awareness training.
Hands-on experience with MO365 Purview including eDiscovery and litigation actions.
Experience developing detailed quality trending metrics from scratch.
Experience managing Enterprise security GRC and Third-Party risk tools.
Previous engineering experience (Security Operations or Engineering).
Experience with multi-cloud platforms (Azure, O365, AWS, GPC, etc.).
High level knowledge associated with risk management, data governance and privacy, and compliance activities in a distributed environment.
Hands-on experience with security standards and compliance frameworks (SOC-2, NIST 800-53 series, FAIR, etc.).
Knowledge of current data privacy laws (CCPA, CPRA, GDPR).

Benefits

Comp & perks

participation in a retirement plan
quarterly and annual incentive plan bonuses
life and disability insurance
health, dental and vision plans
flexible spending accounts
15 paid vacation days
2 paid personal days
9 paid holidays
40 hours of paid sick leave
parental leave
employee stock purchase plan

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Third-Party Risk ManagementData Privacysecurity awareness trainingmetrics developmentEnterprise security GRCmulti-cloud platformssecurity standardscompliance frameworksrisk managementdata governance

Soft Skills

leadershipcommunicationstrategic thinkingmethodical planningtactical executionmentorshipproblem-solvingstakeholder engagementproject managementteam collaboration

Certifications

CISSPCISMCGEIT