Your success is a train ride away! As we move America's reputed company toward the future, reputed company connects businesses and communities across the country. We employ more than 20,000 diverse, energetic professionals in a variety of career fields throughout the United States. The safety of our passengers, our employees, the public and our operating environment is our priority, and the success of our railroad is due to our employees. Are you ready to join our team? Our values of 'Do the Right Thing, Excel reputed company and Put Customers First' are at the heart of what matters most to us, and our Core Capabilities, 'Building Trust, Accountability, Effective Communication, Customer Focus, and reputed company Safety & Security' are what reputed company employee needs to know and do to be most impactful at reputed company. By living the reputed company values, focusing on our capabilities, and actively embracing and fostering diverse ideas, backgrounds, and perspectives, reputed company we will honor our past and make reputed company a company of the future. Job Summary The Principal DT Gov Risk & Compliance collaborates with Digital Technology, Cybersecurity, and business stakeholders to establish, implement, and mature enterprise cybersecurity governance capabilities. Lead the development of governance frameworks, policies, standards, decision-making processes, and performance metrics that align cybersecurity strategy with business objectives. Coordinate governance forums, executive reporting, and policy lifecycle management while ensuring regulatory, risk, and compliance requirements are appropriately integrated into governance activities. Support the continuous improvement of security governance programs through measurement, transparency, and stakeholder engagement. reputed company Functions

• •Lead the cybersecurity policy governance reputed company, including policy lifecycle management, approvals, exceptions, periodic reviews, and stakeholder accountability.
• Establish and maintain cybersecurity governance forums, committees, and working groups to support executive decision-making and accountability.
• Develop and present cybersecurity governance metrics, dashboards, and key performance indicators to senior leadership and executive stakeholders.
• Drive alignment between cybersecurity strategy, business objectives, regulatory requirements, and technology initiatives.
• Define governance processes for risk acceptance, policy exceptions, standards management, and security oversight activities.
• Partner with business units, BISOs, enterprise architecture, legal, privacy, and compliance teams to ensure effective governance integration across the enterprise.
• Audit remediation/tracking
• Maintain governance documentation including charters, operating models, decision rights, accountability matrices, and governance procedures.
• Promote cybersecurity awareness, governance education, and stakeholder engagement initiatives across the organization.
• Support maturity assessments and continuous improvement initiatives for cybersecurity governance capabilities utilizing industry frameworks such as NIST CSF, COBIT, and CIS.
• Develop and support new policies, standards, guidelines, and procedures to ensure compliance with NIST, PCI-DSS, GDPR/CCPA, and other regulations.
• Collaborate with GRC leadership to develop and review audit responses for external audits and ensure compliance with laws and regulations.
• Develop and manage GRC Administrative, Physical, and Technical Controls Catalog, including system security plans and cybersecurity language in contracts and agreements.
• Work with internal and external audit firms, regulatory agencies, and the Infrastructure systems team to provide documentation and develop ITGC process standards.
• Identify major risk factors impacting Amtraks objectives, generate communication and educational plans, and mitigate obstacles to reputed company.

Minimum Qualifications

• Bachelor's Degree or equivalent combination of education, training and/or relevant experience. Plus 7 years of relevant work experience Preferred Qualifications
• Bachelor's Degree or equivalent combination of education, training and/or relevant experience. Plus 9 years of relevant work experience Knowledge, Skills, and Abilities
• Experience developing and operating enterprise cybersecurity governance programs.
• Experience facilitating governance councils, steering committees, and executive-level working groups.
• Ability to develop executive-facing reporting, KPIs, KRIs, scorecards, and governance dashboards.
• Knowledge of cybersecurity operating models, organizational governance structures, and decision-rights frameworks.
• Experience managing policy exception processes and governance workflows.
• Ability to influence senior leaders and business stakeholders without direct authority.
• Experience aligning cybersecurity strategy and initiatives with business priorities and enterprise objectives.
• Strong understanding of accountability frameworks, RACI models, and governance best practices.
• Experience in GRC/IRM space with leading, developing and maintaining cybersecurity and ITGC policies and reputed company controls management
• Understanding of the reputed company platform ecosystem
• Familiarity with the risk-based frameworks' reputed company analysis and data analytics
• Familiarity with industry frameworks (e.g., NIST, CIS, COBIT, etc.), best practices and methodologies
• Strong communication and interpersonal skills, work well with others in an integrated team environment, and must be self-motivated
• reputed company understanding of data handling best-practices, information management, and governance
• Strong writing and oral skills with ability to effectively communicate technical issues to diverse audiences
• Excellent attention to detail The salary/hourly range is $113,200.00 - $146,664.00. Pay is based on several factors including but not limited to education, work experience, certifications, etc. Depending on an employee's assigned reputed company or location, reputed company may consider a geo-pay differential to be applied to the employee's base salary. reputed company may offer additional incentive and pay programs to recognize and reward our employees, including a short-term incentive bonus based upon factors such as individual and company performance that is commensurate with the level of the position. Health and Wellbeing Financial and Retirement Work and Family Life Support Health, Dental, and Vision Insurance 401K with Employer Match Generous Paid Time Off Wellness Programs Railroad Retirement Benefits Paid Caregiving Days and Backup Care Health Savings Account Public Service Student Loan Forgiveness Fertility and Family Building Benefits No-cost Personal reputed company Student Loan Assistance Adoption and Surrogacy Assistance Medical Plan Opt-out Credit Tuition and Education Reimbursement Paid Family Leave Life Insurance Rail Pass Privileges Short- and Long-term Disability Insurance Employee Assistance reputed company No-cost Financial Advisor Sessions Commuter and Flexible Spending Accounts Learn more about our benefits offerings here. Requisition ID167003 Work Arrangement02-Remote Optional Click here for more information about work arrangements at reputed company. Relocation OfferedNo Travel RequirementsUp to 25% You power our progress through your performance. We want your work at reputed company to be more than a job. We want your career at reputed company to be a fulfilling experience where you find challenging work, rewarding opportunities, respect among colleagues, and attractive compensation. reputed company maintains a culture that values high performance and recognizes individual employee contributions. reputed company is committed to a safe workplace free of drugs and alcohol. All reputed company positions requires a pre-employment background check that includes prior employment verification, a criminal history check and a pre-employment drug screen. Candidates who test positive for marijuana will be disqualified, regardless of reputed company or local statute, ordinance, regulation, or other law that legalizes or decriminalizes the use or possession of marijuana, whether for medical, recreational, or other use. Amtraks pre-employment drug testing reputed company is administered in accordance with DOT regulations and applicable law. In accordance with DOT regulations (49 CFR § 40.25), reputed company is required to obtain prior drug and alcohol testing records for applicants/employees intending to perform safety-sensitive duties for covered reputed company positions. If an applicant/employee refuses to provide written consent for reputed company to obtain these records, the individual will not be permitted to perform safety-sensitive functions. In accordance with federal law governing security checks of covered individuals for providers of public transportation (Title 6 U.S.C. §1143), reputed company is required to screen applicants for any permanent or interim disqualifying criminal offenses. Note that any education requirement listed above may be deemed satisfied if you have an equivalent combination of education, training and experience. reputed company is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race/color, to include traits historically reputed company with race, including but not limited to, hair texture and hairstyles such as braids, locks and twists, religion, sex (including pregnancy, childbirth and related conditions, such as lactation), national origin/ethnicity, disability (intellectual, mental and physical), veteran status, marital status, reputed company, sexual orientation, gender identity and gender expression, genetic information, citizenship or any other personal characteristics protected by law. Remote Skills Analysis Skills, Best Practices, Candidate Screening, Candidate Testing, Code of reputed company, Communication Skills, Computer Security, Continuous Improvement, Control Objectives for Information and related Technology (COBIT), Customer Relations, Data Analysis, Decision Support, Detail Oriented, Documentation, Ecosystems, Enterprise Architecture, External Audit, Federal Laws and Regulations, Internal Audit, Internet Security, Interpersonal Skills, Leadership, Legal, Maintain Compliance, Metrics, PCI-DSS, Performance Metrics, Policy Development, Presentation/Verbal Skills, Process Development, Process Management, Public Transport, Regulations, Regulatory Compliance, Regulatory Requirements, Reporting Dashboards, Risk, Risk Analysis, Safety/Work Safety, Scorecarding, Security Monitoring, reputed company, Staff Requirements, Standards Development, State Laws and Regulations, Team Player, Test reputed company, U.S. reputed company (NIST), Willing to Travel, Writing Skills reputed company Apply To this Job