Job Description:

Key Responsibilities

• Program Leadership & Governance
  • Define, plan, and execute large-scale ISRM programs, ensuring alignment with organizational security objectives and regulatory requirements.
  • Serve as the single point of accountability for program delivery, risk mitigation, and stakeholder communication.
  • Establish and manage program governance structures, including steering committees, reporting cadences, and escalation protocols.
• Security Domain Expertise
  • Drive initiatives in areas such as Identity and Access Management (IAM), Privileged Access Management (PAM), Security Operations (SOC), Threat & Vulnerability Management, and Compliance (e.g., ISO 27001, NIST, GDPR).
  • Collaborate with cybersecurity architects, engineers, and compliance teams to ensure secure design and implementation of solutions.
• Stakeholder Engagement
  • Interface with senior leadership, clients, and cross-functional teams to align security programs with business priorities.
  • Lead governance meetings and provide executive-level reporting on program health, risks, and milestones.
• Resource & Financial Management
  • Manage program budgets, resource allocation, and vendor engagements.
  • Track financials, forecast resource needs, and ensure cost-effective delivery.
• Operational Excellence
  • Implement and monitor KPIs, SLAs, and quality assurance measures.
  • Drive continuous improvement through retrospectives, lessons learned, and process optimization.

Required Qualifications

• PMP Certification (Project Management Professional) mandatory.
• 10+ years of experience in program/project management, with at least 5 years in the cybersecurity or ISRM domain.
• Strong understanding of security frameworks (e.g., NIST, ISO 27001, CIS Controls).
• Experience managing global, multi-location teams and vendor ecosystems.
• Proficiency in tools such as MS Project, JIRA, Confluence, and GRC platforms.
• Excellent communication, negotiation, and leadership skills.

Preferred Skills

• Certifications such as CISSP, CISM, or CISA.
• Experience with cloud security (AWS, Azure, GCP).
• Familiarity with Okta, SIEM tools (e.g., Splunk), and endpoint protection platforms.
• Exposure to regulatory environments like HIPAA, SOX, or PCI-DSS