Cyber Program Manager - CISO

About the role

The Cyber Program Manager is responsible for leading, coordinating, and optimizing the organization's cybersecurity initiatives. This role ensures the effective implementation of cybersecurity programs by leveraging data-driven metrics, robust program management methodologies, and tailored executive communications. The Cyber Program Manager will drive continuous improvement, manage risk, and deliver strategic insights to executive stakeholders.

Responsibilities

• Cybersecurity Metrics and Continuous Improvement
• Develop, implement, and maintain a comprehensive set of cybersecurity metrics, including but not limited to: incident response times, vulnerability remediation rates, compliance status, user awareness training completion, and risk exposure levels.
• Link metrics to actionable decision-making processes, ensuring that data informs prioritization, resource allocation, and risk mitigation strategies.
• Establish and manage feedback mechanisms (e.g., regular metric reviews, stakeholder feedback sessions, lessons learned workshops) to drive continuous improvement of cybersecurity processes and controls.
• Program Management
• Lead the planning, execution, and delivery of cybersecurity programs using preferred methodologies such as Agile, Waterfall, or hybrid approaches, and tools including Microsoft Azure DevOps (ADO), Jira, or equivalent.
• Oversee risk and issue tracking, ensuring timely identification, assessment, mitigation, and escalation of program risks and issues.
• Manage change control processes, ensuring that all program changes are documented, evaluated for impact, and communicated to relevant stakeholders.
• Ensure on-time delivery of program milestones, proactively addressing obstacles and adjusting plans as necessary.
• Conduct resource planning and allocation to optimize team performance and program outcomes.
• Executive Deliverables and Stakeholder Engagement
• Develop and deliver customized executive summaries, dashboards, and recommendations tailored to the needs of different executive audiences (e.g., Board of Directors, CISO, CIO, IT leaders).
• Synthesize complex technical information into clear, actionable insights for non-technical stakeholders.
• Lead the preparation and presentation of program status reports, risk assessments, and strategic recommendations for executive review and approval.
• Actively participate in executive review and approval processes, ensuring alignment with organizational objectives and securing necessary buy-in for key initiatives.

Requirements

• Bachelor’s degree in Information Security, Computer Science, Business Administration, or related field; Master’s degree preferred.
• 7+ years of experience in cybersecurity program management or a related discipline.
• Demonstrated expertise in developing and managing cybersecurity metrics and feedback mechanisms.
• Proven experience with program management methodologies and tools (e.g., Agile, Waterfall, Microsoft ADO, Jira).
• Strong analytical, organizational, and communication skills, with the ability to engage and influence executive stakeholders.
• Relevant certifications (e.g., PMP, CISSP, CISM) are highly desirable.

Qualifications

• Strategic thinking and decision-making
• Leadership and team management
• Effective communication and executive presence
• Risk management and problem-solving
• Adaptability and continuous improvement mindset

Benefits

• Medical, dental, life, vision, disability, 401(k), Employee Stock Purchase Plan, paid time off, and tuition reimbursement
• Discounts on Stanley Black & Decker tools and other partner programs

Pay

The salary range for this position is $110,600.00 - $178,000.00

Schedule

Full-time