Develop, implement, and manage comprehensive security programs and projects from inception to completion.
Define program metrics, KPIs, and reporting mechanisms to track effectiveness and present results to senior leadership.
Lead security related projects from conception through delivery, ensuring timelines, budgets, and quality criteria are met.
Conduct risk assessments, threat modeling, and gap analyses; prioritize remediation efforts based on business impact.
Ensure compliance with relevant regulations and standards (e.g., GDPR, CCPA, PCI DSS, HIPAA, SOX).
Manage security audits and coordinate with external auditors and regulators.
Oversee, track and drive vulnerability remediation to meet established SLAs.

7+ years of progressive experience in information security, risk management, or related fields; at least 3 years in a program or project management capacity.
Bachelor’s degree in Computer Science, Information Security, Business Administration, or a related discipline (Master’s preferred).
Strong understanding of security frameworks (NIST CSF, ISO 27001), cloud security (AWS, GCP), network security, encryption, identity & access management, and emerging threat landscapes.
Proven ability to influence and drive consensus across diverse stakeholders; exceptional written and verbal communication skills.
Ability to translate complex security concepts into actionable business recommendations.

Security Program Manager

Key skills