Principal Information Security Engineer - Governance & Risk (Remote)
FERGUSON · Posted Nov 9, 2026
- Remote, United States
- Remote
- Full-time · Principal
- $11K–$19K per month
- 5+ years
The Principal Information Security Engineer – IT Governance & Risk plays a key role in advancing Ferguson’s enterprise cybersecurity risk and governance strategy. This highly visible position leads several critical security programs, including Third-Party Risk Assessment (TPRA), NIST Cybersecurity Framework (CSF) transformation, external security posture management, and cybersecurity risk oversight.
Compensation
$10,594.74 - $18,536.46
Responsibilities
- Lead enterprise cybersecurity risk assessments using the NIST Cybersecurity Framework (CSF)
- Assess and measure cybersecurity program maturity and find opportunities for improvement
- Develop recommendations and remediation plans to address security control gaps and risk exposures
- Partner with technology and business teams to improve governance and risk management
- Support development and maintenance of security roadmaps, governance processes, and performance metrics
Requirements
- Information Security
- Cybersecurity
- Information Systems
- Computer Science
- Business Administration