Program Manager, Information Security
Client is looking for an experienced program manager to be part of a dynamic team supporting IT Information Security and AI. This position’s primary responsibility is the management of strategic initiatives and programs within client. The IT Program Manager will be responsible for working across multiple groups, towers, and geographies to successful deliver business value. This individual will need to have excellent communication skills, determination, and perseverance to be successful.
The IT Program Manager will manage a set of projects as well as participate in short- and long-term strategy planning. The IT Program Manager will work closely with Operations Teams, Application Teams, and Business units to ensure proper execution of project and program plans.
Experience with modern cybersecurity architectures and technologies including Zero Trust Network Access (ZTNA), Identity and Access Management (IAM), Privileged Access Management (PAM), Multi-Factor Authentication (MFA), Security Operations (SOC), Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR/XDR), Cloud Security, Data Protection, Network Security, and Firewall technologies is highly desirable.
Job Responsibilities:
- Lead and execute complex IT programs and projects across Infrastructure, Applications, Information Security, Cloud, Data Analytics, AI, and Enterprise Technology domains.
- Develop and manage project/program plans, scope, schedules, budgets, resources, quality objectives, and deliverables to ensure successful business outcomes.
- Define and manage strategic program roadmaps aligned with business priorities, cybersecurity strategy, technology modernization, and digital transformation objectives.
- Lead enterprise cybersecurity initiatives including Zero Trust (ZTNA), Identity Security, MFA, PAM, IGA, Network Segmentation, DLP, Threat Detection, Cloud Security, and Security Compliance programs.
- Drive cross-functional security programs involving Firewall modernization, Network Security, Secure Remote Access, SASE, Security Operations, Vulnerability Management, and Infrastructure Security enhancements.
- Partner closely with Security Architects, Security Engineering, Infrastructure, Cloud, Network, Application Development, Operations, and Business teams to integrate security requirements into technology roadmaps and delivery plans.
- Utilize Agile, Scrum, and Waterfall methodologies to manage multiple concurrent projects, dependencies, risks, and resources while ensuring timely delivery of business and security objectives.
- Develop business cases, investment proposals, and strategic recommendations that support technology, cybersecurity, AI, and enterprise transformation initiatives.
- Engage business stakeholders to understand requirements, align technology solutions with business objectives, and manage expectations throughout the program lifecycle.
- Establish governance frameworks, security metrics, KPIs, KRIs, dashboards, and reporting mechanisms to measure program performance, security posture, risk exposure, and value realization.
- Provide executive-level reporting and communications to CIO, CISO, senior leadership, steering committees, and governance boards on program status, risks, budgets, compliance readiness, and strategic outcomes.
- Lead risk management, security governance, compliance, audit readiness, and remediation activities by identifying cybersecurity risks, developing mitigation plans, and driving issue resolution.
- Manage vendor selection, third-party relationships, and external service providers while ensuring alignment with organizational, technology, and security objectives.
- Drive continuous process improvement, operational excellence, AI governance, and organizational resilience while adapting to evolving business priorities, regulatory requirements, and emerging cyber threats.
Qualifications
- 15+ years of IT experience with 10+ years successfully leading large, cross-functional projects and programs.
- PMP or equivalent Project Management certification preferred; cybersecurity certifications such as CISSP, CISM, CRISC, CCSP, or Security+ are a plus.
- Strong understanding of cybersecurity domains including Zero Trust, IAM, PAM, MFA, Network Security, Cloud Security, Data Protection, Vulnerability Management, Security Operations, and Incident Response.
- Experience leading enterprise security initiatives such as ZTNA, MFA, IGA, PAM, Firewall Modernization, SIEM, EDR/XDR, Cloud Security, and Compliance Programs.
- Working knowledge of cybersecurity frameworks and standards including NIST CSF, NIST 800-53, CIS Controls, ISO 27001, SOC 2, and Zero Trust Architecture principles.
- Strong technical foundation with experience in SDLC, Agile, Scrum, and enterprise technology delivery methodologies.
- Proven ability to drive executive communications, governance, stakeholder alignment, business cases, strategic roadmaps, KPIs/KRIs, and portfolio reporting.
- Experience managing third-party vendors, security assessments, remediation efforts, audits, and risk management initiatives.
- Excellent leadership, collaboration, communication, and influencing skills, with proficiency in Microsoft Project, M365, Visio, Excel, PowerPoint, Smartsheet, Jira, and related portfolio management tools.
