Information Security Program Manager

About the role

This role manages, plans and leads Information Services teams including Security Operations Center (SOC), Security Architecture and Engineering (SAE), Security Governance and Compliance (GC) and Security Awareness and Training (SAT).

Responsibilities

• Manage SOC, Security Architecture & Engineering, Governance & Compliance, and Awareness & Training teams.
• Develop strategic plans and budgets; hire, coach, and perform performance management.
• Oversee security tool selection/implementation; monitor program KPIs and outcomes.
• Cook up policies, standards, and compliance activities across divisions.
• Lead cross functional security initiatives; resolve escalations and resource constraints.
• Report program status to leadership; prepare presentations for decision makers and stakeholders, and ensure effective vendor management.
• Provide knowledge transfer

Qualifications

• Advanced certifications such as CISSP, CISA, or equivalent.
• Bachelor's degree with 7 years of experience or comparable combination of degree and years of service
• 3 years of experience managing staff
• ISACA Certified in the Governance of Enterprise IT (CGEIT) and ISACA Certified Information Security Manager (CISM)
• Experience with security frameworks and compliance standards such as NIST, CJIS, HIPAA, ISO, GDPR, and FISMA
• Strong experience with IT governance systems
• Strong experience in cybersecurity, risk frameworks, compliance