Information Security Program Manager

WHAT YOU WILL DO

Security Program Leadership & Operations



* Develops and implements client information security programs that meet business, regulatory, and industry requirements



* Advises executive leadership on information security strategy, policies, standards, and procedures


* Updates client executives on security plan progress, emerging threats, and actual or potential security incidents


* Develops and maintains security policies and procedures that govern the protection of the confidentiality, integrity, and availability of client systems and data


* Monitors client security programs and environment changes to keep controls effective and risks minimized


* Oversees implementation of security solutions to improve overall security posture


* Develops, maintains, and coordinates testing of disaster recovery and business continuity plans that reflect client system and facility needs


* Develops, delivers, and monitors security awareness training programs


* Works within cross-functional teams to develop and deliver secure solutions



* Leads or participates in client steering committees and working groups as needed



* Coordinates with client security teams on incident detection, response, and resolution within agreed service-level agreements (SLAs)

Risk & Compliance Support



* Leads internal, vulnerability, and third-party risk assessments and supports client security audits



* Conducts security reviews of new and existing systems and recommends improvements to systems, policies, and procedures



* Ensures appropriate administrative, technical, and physical safeguards protect client systems and information


* Advises clients on control requirements for NIST CSF, ISO/IEC 27001/27002, HIPAA, SOC 2, PCI DSS, and other applicable frameworks and regulations


* Assesses control gaps and maturity against applicable frameworks and helps clients prioritize remediation


* Supports client audits, assessments, and certifications by clarifying controls, coordinating evidence, and addressing findings


* Defines scope and maintains segmentation and protection controls for regulated data environments (e.g., ePHI, cardholder data, CUI)



* Oversees vulnerability scanning and penetration testing programs aligned with framework and regulatory requirements



* Maintains cross-framework control mappings and supports compensating-control and risk-acceptance documentation

WHAT MAKES YOU STAND OUT



* Communication Proficiency


* Decision Making


* Project Management


* Teamwork Orientation


* Thoroughness


* Client Relationship Management



* Regulatory Compliance Expertise

WHAT ARE WE LOOKING FOR

Information Security Experience

Note: The required qualifications may be satisfied through a combination of the experience areas listed below.


* At least five years of information security leadership experience, such as CISO, vCISO, or senior se...