CISSP
CISA
Google Cybersecurity Model. It will provide a high-level overview of the stages, planning process, and maturity process of an organization. I do not work in this field but I deal with other management control function like Risk... In all honesty, they all work the same. In addition, perhaps security can be considered a risk, so look up Risk Management.
If you like working in an audit or control function, then this is for you. Very regimented, rigorous and process oriented.