Information Security Program Manager

RESPONSIBILITIES:
Kforce has a client that is seeking an Information Security Program Manager in in Minneapolis, MN.

Summary:
We are seeking a strategic and results-driven Information Security Program Manager to lead and coordinate enterprise-wide security initiatives. This role is responsible for managing the planning, execution, and delivery of security programs that protect the organization's data, systems, and infrastructure. The ideal candidate will have a strong background in cybersecurity, risk management, and program governance.

Key Responsibilities:
* Develop, implement, and manage comprehensive information security programs aligned with business objectives and regulatory requirements
* Coordinate cross-functional teams to execute security initiatives, including risk assessments, compliance audits, and incident response planning
* Monitor and report on the effectiveness of security controls and program performance metrics
* Lead governance activities including policy development, awareness training, and stakeholder communication
* Manage relationships with internal and external stakeholders, including IT, legal, compliance, and third-party vendors
* Ensure alignment with frameworks such as NIST, ISO 27001, CIS Controls, and applicable regulations (e.g., GDPR, HIPAA, PCI-DSS)
* Oversee the lifecycle of security projects, including budgeting, resource allocation, and timeline management
* Facilitate executive-level reporting and presentations on program status, risks, and mitigation strategies
* Stay current with emerging threats, technologies, and best practices in cybersecurity

REQUIREMENTS:
* Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or a related discipline
* 5+ years of experience in IT or cybersecurity risk management, with specific experience in third-party or vendor risk
* Strong knowledge of third-party risk management frameworks and control standards (e.g., NIST, ISO 27001, SIG, SOC 2, CSA)
* Hands-on experience reviewing third-party security assessments, risk questionnaires, and due diligence documentation
* Familiarity with GRC or third-party risk platforms (e.g., Onspring, OneTrust, Archer, ServiceNow, Prevalent, BitSight, Panorays)
* Excellent communication and negotiation skills to work with internal and external stakeholders

Preferred Skills:
* Industry certifications (e.g., CRISC, CTPRP, CISA, CISSP) are a plus
* Experience in cloud security and hybrid environments (AWS, Azure, Google Cloud Platform)
* Familiarity with data privacy regulations and enterprise risk management
* Ability to influence and drive change across diverse teams
* Strong analytical and problem-solving capabilities

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.