Senior Information Technology Program Manager

About the role

The State Corporation Commission (SCC) is seeking a Senior IT Program Manager to lead cybersecurity initiatives, projects, and initiatives that protect the SCC's information assets and technology infrastructure. The role involves managing a cross-functional team, vendors, and stakeholders to deliver security capabilities on time, within scope, and on budget.

Responsibilities

• Establish and oversee governance processes for cybersecurity initiatives, ensuring alignment with enterprise priorities and compliance requirements.
• Lead multiple concurrent cybersecurity projects, ensuring dependencies are managed and milestones are met.
• Manage relationships with vendors, MSSPs/MDR providers, and consulting partners.
• Serve as the primary point of contact for program-related decisions and strategic direction.
• Develop, manage, and maintain cybersecurity program plans that adhere to relevant frameworks and regulations as well as support organizational security objectives and risk tolerance.
• Track program progress and measure success using key performance indicators (KPIs) and security metrics to drive continuous improvement.
• Oversee the procurement and implementation of cybersecurity technologies, tools, and services.
• Lead regular executive briefings and status updates on cybersecurity program progress, challenges, and achievements.
• Prepare communications and reports for internal and external stakeholders, including reports for internal and external audits.
• Identify and track cybersecurity risks, threats, and vulnerabilities across programs and projects.
• Assist in coordinating cybersecurity incident response activities and lessons learned.
• Partner with IT teams to validate risk mitigation strategies and incident response readiness.
• Track and remediate audit findings, security exceptions, and penetration test findings.
• Assist with maintaining risk register and work with IT and business units to close control gaps.
• Support the development and testing of business continuity and disaster recovery plans as they relate to cybersecurity.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Information System, or a related field.
• Significant professional experience leading Cybersecurity projects and/or IT projects.
• Some experience with vendor management and managing a cross-functional team.
• Some experience in project management and strategic Cybersecurity/IT planning is beneficial.
• Thorough knowledge of risk management, vulnerability management, and governance policies.
• Experience with producing various reports and metrics in programs such as Microsoft Power BI and Microsoft Excel.
• Broad knowledge of enterprise IT domains such as infrastructure, applications, security, cloud computing, and data management.
• Strong leadership and performance management skills.
• Ability to manage, coach, develop, train, and evaluate staff.
• Ability to effectively manage IT and cybersecurity vendors.
• Ability to prepare documentation, reports, processes, and procedures.
• Ability to explain and present technical matters clearly and effectively in both a technical and non-technical manner.
• Excellent attention to detail, interpersonal skills, research abilities, and critical thinking skills.
• Highly self-motivated and proven analytical, evaluative, and problem-solving abilities.

Qualifications

• Significant professional experience leading Cybersecurity projects and/or IT projects.
• Some experience with vendor management and managing a cross-functional team.
• Some experience in project management and strategic Cybersecurity/IT planning is beneficial.
• Thorough knowledge of risk management, vulnerability management, and governance policies.
• Experience with producing various reports and metrics in programs such as Microsoft Power BI and Microsoft Excel.
• Broad knowledge of enterprise IT domains such as infrastructure, applications, security, cloud computing, and data management.
• Strong leadership and performance management skills.
• Ability to manage, coach, develop, train, and evaluate staff.
• Ability to effectively manage IT and cybersecurity vendors.
• Ability to prepare documentation, reports, processes, and procedures.
• Ability to explain and present technical matters clearly and effectively in both a technical and non-technical manner.
• Excellent attention to detail, interpersonal skills, research abilities, and critical thinking skills.
• Highly self-motivated and proven analytical, evaluative, and problem-solving abilities.

Skills

• Significant professional experience leading Cybersecurity projects and/or IT projects.
• Some experience with vendor management and managing a cross-functional team.
• Some experience in project management and strategic Cybersecurity/IT planning is beneficial.
• Thorough knowledge of risk management, vulnerability management, and governance policies.
• Experience with producing various reports and metrics in programs such as Microsoft Power BI and Microsoft Excel.
• Broad knowledge of enterprise IT domains such as infrastructure, applications, security, cloud computing, and data management.
• Strong leadership and performance management skills.
• Ability to manage, coach, develop, train, and evaluate staff.
• Ability to effectively manage IT and cybersecurity vendors.
• Ability to prepare documentation, reports, processes, and procedures.
• Ability to explain and present technical matters clearly and effectively in both a technical and non-technical manner.
• Excellent attention to detail, interpersonal skills, research abilities, and critical thinking skills.
• Highly self-motivated and proven analytical, evaluative, and problem-solving abilities.

Benefits

• Hybrid work schedule (some in-office and telework days each week).
• A variety of professional development and training opportunities.

Pay

Anticipated Starting Salary Range: $125,000 - $160,000
Starting Salary Commensurate with Qualifications and Experience

Schedule

This position offers a hybrid work schedule (some in-office and telework days each week).