[Hiring] External Industry Risk & Security Governance Representative @RSI Security

Role Description

The External Industry Risk & Security Governance Representative serves as a voting member of the RSIS Impartiality Committee. This is a governance oversight role — not an audit, consulting, sales, or certification decision function. The role ensures that certification and inspection activities:

• Reflect real-world industry risk expectations
• Remain free from commercial pressure
• Do not prioritize revenue over integrity
• Maintain public trust and stakeholder confidence

Committee members do not:

• Participate in audit execution
• Participate in certification decisions
• Engage in sales or commercial negotiations
• Provide advisory services to RSIS certification clients during tenure

Key Responsibilities

• Provide independent industry perspective on impartiality risks
• Review high and critical structural risks presented by management
• Assess whether commercial models could create undue influence
• Evaluate revenue concentration and market dependency risks
• Ensure industry credibility of certification and inspection decisions
• Challenge management where independence safeguards appear insufficient
• Participate in quarterly committee meetings

Governance Authority

• Committee members hold voting authority within the Committee
• Operate independently from management
• May request documentation necessary to discharge oversight responsibilities
• Have authority to escalate unresolved concerns in accordance with the Committee Charter

Qualifications

• 10+ years in enterprise security, risk management, governance, or executive oversight
• Experience serving as CISO, Deputy CISO, VP Security, Risk Executive, or equivalent
• Understanding of third-party assurance, certification, or regulatory oversight environments
• Ability to operate at governance and oversight level rather than operational delivery

Preferred

• Experience interacting with certification bodies, regulators, or accreditation frameworks
• Experience with ISO-based management systems or structured audit environments
• Experience in SaaS / enterprise cybersecurity governance

Independence Requirements

• Complete formal Conflict of Interest screening prior to appointment
• Disclose advisory or financial relationships with RSI entities
• Commit to ongoing annual independence attestations
• Agree not to perform advisory services for RSIS certification clients during tenure
• Cooling-off and recusal requirements apply where applicable

Term & Review

Appointments are for a two-year term, renewable once, subject to continued independence verification and performance review in accordance with the Impartiality Committee Charter.

Benefits

• Stipend / Per-Meeting Compensation: $500
• Travel: None (virtual)

Company Description

RSI Security operates an independent Certification Body (CB) aligned with ISO/IEC 17021-1 and pursuing accreditation for ISO/IEC 42001 (Artificial Intelligence Management Systems). RSI also operates CMMC C3PAO Level 2 assessment activities aligned with ISO/IEC 17020 requirements.

To safeguard accreditation integrity, RSI maintains a formally constituted Impartiality Committee composed of internal and external voting members representing balanced interests.