Information Security Program Manager

Job Responsibilities:

• Lead and execute complex IT programs and projects across Infrastructure, Applications, Information Security, Cloud, Data Analytics, AI, and Enterprise Technology domains.
• Develop and manage project/program plans, scope, schedules, budgets, resources, quality objectives, and deliverables to ensure successful business outcomes.
• Define and manage strategic program roadmaps aligned with business priorities, cybersecurity strategy, technology modernization, and digital transformation objectives.
• Lead enterprise cybersecurity initiatives including Zero Trust (ZTNA), Identity Security, MFA, PAM, IGA, Network Segmentation, DLP, Threat Detection, Cloud Security, and Security Compliance programs.
• Drive cross-functional security programs involving Firewall modernization, Network Security, Secure Remote Access, SASE, Security Operations, Vulnerability Management, and Infrastructure Security enhancements.
• Partner closely with Security Architects, Security Engineering, Infrastructure, Cloud, Network, Application Development, Operations, and Business teams to integrate security requirements into technology roadmaps and delivery plans.
• Utilize Agile, Scrum, and Waterfall methodologies to manage multiple concurrent projects, dependencies, risks, and resources while ensuring timely delivery of business and security objectives.
• Provide executive-level reporting and communications to CIO, CISO, senior leadership, steering committees, and governance boards on program status, risks, budgets, compliance readiness, and strategic outcomes. 

Qualifications    

• 15+ years of IT experience with 10+ years successfully leading large, cross-functional projects and programs.
• PMP or equivalent Project Management certification preferred; cybersecurity certifications such as CISSP, CISM, CRISC, CCSP, or Security+ are a plus.
• Strong understanding of cybersecurity domains including Zero Trust, IAM, PAM, MFA, Network Security, Cloud Security, Data Protection, Vulnerability Management, Security Operations, and Incident Response.
• Experience leading enterprise security initiatives such as ZTNA, MFA, IGA, PAM, Firewall Modernization, SIEM, EDR/XDR, Cloud Security, and Compliance Programs.
• Working knowledge of cybersecurity frameworks and standards including NIST CSF, NIST 800-53, CIS Controls, ISO 27001, SOC 2, and Zero Trust Architecture principles.
• Strong technical foundation with experience in SDLC, Agile, Scrum, and enterprise technology delivery methodologies.
• Proven ability to drive executive communications, governance, stakeholder alignment, business cases, strategic roadmaps, KPIs/KRIs, and portfolio reporting.
• Experience managing third-party vendors, security assessments, remediation efforts, audits, and risk management initiatives.
• Excellent leadership, collaboration, communication, and influencing skills, with proficiency in Microsoft Project, M365, Visio, Excel, PowerPoint, Smartsheet, Jira, and related portfolio management tools.