ITSO Sr. Program Manager

About the role

The IT Security Office (ITSO) at Duke University is seeking a Senior Program Manager to lead the strategic direction of the university's cybersecurity initiatives. The role involves shaping, communicating, and advancing Duke's cybersecurity strategy, working closely with leadership to define standards, practices, and program direction.

Responsibilities

• Assess the cyber risk landscape using metrics dashboards and advise on enhancements to improve clarity and risk quantification.
• Advise on the development of inventory, tracking, and measurement tools, including dashboards covering accounts, devices, servers, network activity, websites, and adoption of key controls such as MFA, endpoint management, patching, and automated IP blocking.
• Identify strategic priorities for ITSO initiatives based on metrics, analysis, potential impact, and risk.
• Provide briefings to the security community, highlighting trends and implications for operational and strategic decisions.
• Lead project work to align the program with actionable industry best practices.
• Manage embedded security roles to ensure alignment with program priorities.
• Create materials articulating policies, positions, and security guidance.
• Develop innovative approaches to enhance the efficiency and value of ITSO’s risk management programs—including vendor reviews.
• Cook up response efforts on cross-functional issues involving groups such as Privacy and Audit, the Duke Health Information Security Office, and other departmental IT groups.

Qualifications

• Minimum requirements: Bachelor’s degree in a related field plus 3 or more years of experience in security, audit, analytics, or related areas. OR 5+ years of combined education/experience in a related field.
• Preferred qualifications: Certifications such as SANS/GIAC, CISSP, CISA, CISM. Experience with cybersecurity, risk analytics, or security program development. Proficiency with quantitative and qualitative analysis supporting data-driven decisions.
• Other requirements: Strong verbal, written, and analytical communication skills. Ability to collaborate across diverse teams and influence through clarity and insight. Ability to work independently and in team settings on complex, fast-moving projects.

Benefits

Duke offers a competitive benefits package including health insurance, retirement plans, and additional perks. Duke is an Equal Opportunity Employer committed to providing employment opportunity without regard to an individual's age, color, disability, gender, gender expression, gender identity, genetic information, national origin, race, religion, sex (including pregnancy and pregnancy related conditions), sexual orientation or military status.