Job Description The VP of Information Security Program Management is a senior delivery leader responsible for the health, governance, and execution of the Information Security program portfolio. This is not a traditional project coordination role - we are looking for a highly assertive program executive with strong presence who can operate effectively in a complex, fast-moving environment. The right candidate drives execution, challenges weak plans, surfaces uncomfortable truths early, and ensures risks and issues are addressed before they impact delivery.
The role sits within the Cybersecurity COO organization and carries dual accountability: owning the day-to-day delivery of the Information Security portfolio while simultaneously building and maturing the program management operating model that the function runs on. This leader will inherit a function in active transformation - navigating an organizational redesign, a Global Capability Center build, a vendor optimization program, and the stand-up of Data Security and AI Security capabilities.
Responsibilities
- Own the integrated Information Security delivery portfolio, maintaining a unified, real-time view of all programs and projects including status, milestones, dependencies, risks, decisions, and resource utilization.
- Build and maintain standardized dashboards, scorecards, and executive reporting that are readily accessible to leadership and key stakeholders.
- Track and monitor portfolio health; ensure risks and issues are escalated with sufficient lead time for leadership action.
- Own the CISO portfolio reporting and escalations process - ensuring the right information reaches the right audience at the right cadence.
- Drive accountability across stakeholders; ensure actions, decisions, and commitments are tracked transparently and closed on time.
- Establish a communications plan for delivery reporting, defining report types, audiences, and cadences that support efficient delivery without unnecessary overhead.
- Coordinate security-related initiatives across the portfolio including identity and access management, SSO, PAM, segregation of duties, security operations, network security, physical security, application onboarding, and regulatory readiness.
- Define, implement, and continuously improve the Information Security program management operating model - establishing the frameworks, templates, tools, and governance routines the function operates on.
- Collaborate with IT organizations across the firm to identify and adopt best practices; ensure Information Security delivery standards are aligned with broader technology organization norms.
- Establish and lead recurring governance forums with the CISO leadership team where portfolio health, risks, and priorities are reviewed.
- Serve as a neutral point of alignment, ensuring objectivity and balance across delivery areas.
- Lead and develop a team of Project Managers and Business Analysts embedded across the Information Security portfolio with influence rather than authority.
- Set clear performance expectations; hold team members accountable to delivery quality, stakeholder engagement, and professional conduct.
- Model a 'trust but verify' mindset - coaching PMs to validate status through evidence and data rather than accepting optimistic self-reporting.
- Lead the annual Information Security investment planning cycle end-to-end, from demand intake and business case development through prioritization, budget submission, and approval.
- Maintain alignment between strategic priorities and funded initiatives throughout the year, surfacing gaps, over-allocations, and trade-off decisions to leadership in real time.
- Partner with Finance and the Cybersecurity COO to track actuals vs. plan; produce variance analysis and reforecast submissions as required.
- Own benefits realization tracking for all approved investments, ensuring outcomes committed to in business cases are measured, reported, and achieved.
- Partner closely with global technology teams to align Information Security delivery with firm-wide technology programs, shared platforms, and enterprise architecture decisions.
- Identify and manage cross-program dependencies between Information Security initiatives and broader technology portfolio commitments.
- Represent Information Security delivery in firm-wide program governance forums; ensure cybersecurity priorities are visible and protected within the broader investment landscape.
- Identify process inefficiencies and control gaps within delivery and governance; recommend and implement targeted improvements that enhance visibility, predictability, and execution speed.
- Facilitate lessons-learned reviews across programs and integrate findings into governance standards and delivery frameworks.
- Champion automation of portfolio management processes using available tooling, reducing manual reporting overhead and improving data quality and timeliness.
Qualifications
- 8+ years of program management experience within Information Security, Cybersecurity, Technology Risk, or Enterprise Technology.
- Demonstrated experience building or leading a PMO or portfolio governance function - not just managing individual programs.
- Experience leading large-scale transformation, integration, or organizational change programs in complex, matrixed environments.
- Strong working knowledge of vendor risk management, security governance, identity and access management, and technology risk.
- Proven experience leading and developing teams of Project Managers and Business Analysts - setting standards, building capability, and managing performance.
- Track record of leading annual investment planning cycles from demand intake through budget submission and approval.
- Experience partnering with senior technology and business leadership and navigating cross-functional dependencies at scale.
- Experience delivering in a global, distributed operating model including coordination with offshore C-based teams.
- Financial services experience strongly preferred; familiarity with regulatory environments, governance standards, and audit readiness is essential.
- Familiarity with AI-assisted PM tooling, portfolio dashboards, and reporting automation preferred.
- PMP certification required or actively in progress; PRINCE2, SAFe, or Agile equivalent a plus.
- CISSP, CISM, or CRISC certification a plus.
Primary Location Full Time Salary Range of $185,000 - $200,000.
#LI-JR1
About Us Jefferies is a leading global, full-service investment banking and capital markets firm that provides advisory, sales and trading, research, and wealth and asset management services. With more than 40 offices around the world, we offer insights and expertise to investors, companies, and governments.
At Jefferies, we are committed to building a culture that provides opportunities for all employees regardless of our differences and supports a workforce that is reflective of the communities where we work and live. As a result, we are able to pool our collective insights and intelligence to provide fresh and innovative thinking for our clients.
Jefferies is committed to creating and sustaining a workforce that welcomes individuals from all backgrounds to apply. Our employment decisions are made without regard to race, creed, color, national origin, ancestry, religion, pregnancy, age, medical condition, physical or mental disability, marital status, domestic partner status, sex, sexual orientation, gender, gender identity or expression, veteran or military status, genetic information, reproductive health decisions, or any other factor protected by applicable law. We are committed to hiring the most qualified applicants and complying with all federal, state, and local equal employment opportunity laws. As part of this commitment, Jefferies will extend reasonable accommodation to individuals with disabilities, as required by applicable law.
The salary offered will take into consideration an individual's experience level and qualifications. In addition to salary, Jefferies Financial Group is proud to offer a comprehensive benefits package to eligible, full-time employees or part-time employees, who are scheduled to work at least 30 hours or more per week, including an annual discretionary incentive and retention bonus, competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Jefferies also offers paid time off packages that include planned time off (e.g., vacation), unplanned time off (e.g., sick leave), and paid holidays, and for full-time employees, paid parental leave.
