Cybersecurity Program Manager (Onsite)

About the role

The Cybersecurity Program Manager is responsible for leading and governing enterprise cybersecurity programs ensuring successful delivery of security initiatives, regulatory compliance, risk reduction, and alignment with business objectives. The role acts as the central coordination point between security teams, IT, business stakeholders, vendors, and executive leadership to drive cybersecurity transformation and operational excellence.

Responsibilities

• Program Portfolio Management
  • Manage end-to-end cybersecurity programs, projects, and strategic initiatives.
  • Develop and maintain cybersecurity roadmaps aligned to organizational objectives.
  • Track program milestones, dependencies, risks, budgets, and resource utilization.
  • Establish governance forums and provide executive-level reporting.
• Cybersecurity Governance
  • Drive adherence to security policies, standards, and regulatory requirements.
  • Coordinate security audits, assessments, and compliance activities.
  • Maintain risk registers, issue logs, and remediation tracking.
• Stakeholder Management
  • Act as the primary liaison among Security, IT Infrastructure, Application Teams, Risk, Compliance, and Business Units.
  • Facilitate steering committee meetings and executive reviews.
  • Manage relationships with external vendors, MSSPs, and security partners.
• Security Initiatives Delivery
  • Lead and govern programs related to Security Operations (SOC, MDR), Identity Access Management (IAM, PAM), Vulnerability Management, Cloud Security, Network Security, Application Security, Governance Risk Compliance (GRC), Data Protection and Privacy, and Security Awareness Programs.
• Risk & Issue Management
  • Identify program risks and develop mitigation strategies.
  • Escalate critical issues to leadership with recommended actions.
  • Ensure timely closure of audit findings and security gaps.
• Metrics & Reporting
  • Track cybersecurity KPIs and KRIs.
  • Prepare executive dashboards and board-level presentations.
  • Measure program effectiveness and business value realization.

Requirements

• Education: Bachelor's degree in Computer Science, Information Security, Information Systems, or related field. Master's degree preferred.
• Experience: 8–15 years of IT and cybersecurity experience, with 5 years in program/project management within cybersecurity. Experience managing large-scale security transformation programs.
• Technical Knowledge: Strong understanding of NIST CSF, ISO 27001, CIS Controls, SOC Operations, SIEM, SOAR Platforms, IAM/PAM Solutions, Vulnerability Management, Cloud Security (Azure, AWS, GCP), and Risk Management Frameworks.
• Preferred Certifications: PMP, PgMP, CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Lead Auditor, Certified Scrum Master (CSM) or Agile certifications.

Skills

• Program/Project Management
• Executive Communication
• Stakeholder Management
• Budget & Resource Planning
• Risk Management
• Vendor Governance
• Leadership & Team Coordination
• Strategic Planning
• Presentation & Reporting

Success metrics

• On-time program delivery
• Risk remediation closure rate
• Security compliance score
• Audit findings closure
• Vulnerability SLA adherence
• Stakeholder satisfaction
• Budget variance
• Cybersecurity maturity improvement

Benefits

• Comprehensive Medical Plan covering Medical, Dental, Vision
• Short Term and Long-Term Disability Coverage
• 401(k) Plan with Company match
• Life Insurance
• Vacation Time, Sick Leave, Paid Holidays
• Paid Paternity and Maternity Leave

Pay

This position includes a bonus or variable payout component based on individual and organizational performance. Actual compensation within the range will be dependent upon the individual's skills, experience, performance, and internal equity. The range displayed on each job posting reflects the minimum and maximum salary target for the position across all US locations; within the range, individual pay is determined by work location, job level, and additional factors including job-related skills, experience, and relevant education or training. Depending on the position offered, other forms of compensation may be provided as part of overall compensation like an annual performance-based bonus, sales incentive pay, and other forms of bonus or variable compensation.