Cyber Security Program Manager

Title: Cyber Security Program Manager

Location: Toronto, CA (Remote)

Type: Contract

Day to Day Job Duties:

• Lead and manage cybersecurity programs using Agile methodologies (Scrum, SAFe, Kanban).
• Oversee cross-functional teams to deliver security initiatives aligned with enterprise goals and frameworks (e.g., NIST, ISO 27001).
• Utilize Jira and Jira Align to plan, track, and report progress across multiple agile teams and release trains.
• Drive value stream identification, mapping, and continuous improvement across cybersecurity initiatives.
• Collaborate with stakeholders, product owners, and technical leads to prioritize backlogs and ensure risk-based delivery outcomes.
• Ensure compliance with internal security policies and external regulatory requirements (e.g., HIPAA, PCI-DSS, SOX).
• Report program status, KPIs, and risk posture to executive leadership and steering committees.
• Implement Agile best practices and Lean Portfolio Management (LPM) principles within cybersecurity programs.
• Manage vendor relationships and coordinate third-party risk management activities.
• Develop and maintain a forward-looking information security roadmap aligned with business strategy.

Basic Qualifications:

(what are the skills required to this job with minimum years of experience on each)

• Minimum 7+ years of experience in program/project management.
• Minimum 3+ years of experience in cybersecurity program delivery.
• Proven experience managing large-scale cybersecurity initiatives (IAM, Zero Trust, SOC modernization, Cloud Security).
• Strong experience with Agile frameworks (Scrum, SAFe, Kanban).
• Hands-on experience with Jira and Jira Align for program tracking and reporting.
• Solid understanding of cybersecurity frameworks (NIST CSF, CIS Controls, ISO 27001).
• Experience with value stream management and delivering outcomes in scaled Agile environments.
• Strong communication, leadership, and stakeholder management skills.

Degree:

• Bachelor’s degree in Computer Science, Information Security, or equivalent work experience.

Nice to Have: (But not a must)

• Certifications such as PMP, SAFe SPC, CSM, CISSP, or CISM.
• Experience with DevSecOps, secure SDLC, and continuous compliance practices.
• Experience working in regulated industries (Finance, Healthcare, Government).
• Consulting or client-facing experience with senior stakeholder engagement.
• Familiarity with enterprise security technologies across multiple platforms.
• Strong understanding of networking and network security concepts.
• Experience applying globally recognized security standards and frameworks.