Sr Program Manager - Security

Role & responsibilities

Security Program & Project Delivery

• Lead the planning, execution, and delivery of security initiatives including vulnerability management programs, NAC implementation, SIEM integration, and incident response enhancements.
• Coordinate cross-functional security projects across IT, infrastructure, compliance, and executive stakeholders.
• Ensure alignment with security frameworks including

  NIST, ISO 27001, CIS Controls, MITRE ATT&CK

  , and regulatory standards like

  HIPAA

  and

  GDPR

  .

Technical Oversight & Reporting

• Act as the SME across multiple domains including cloud security (AWS, Azure, GCP), endpoint security (Crowdstrike, Symantec), and network security (Fortinet, NAC, IDS/IPS).
• Translate technical requirements into business-aligned roadmaps and timelines.
• Own the development of project documentation including scope, timelines, resource allocation, risk logs, and communications plans.

Vulnerability & Risk Management

• Collaborate with vulnerability and threat management teams to prioritize and drive remediation projects.
• Design and deliver reporting dashboards and metrics (KPIs/KRIs) for executive leadership.
• Support remediation planning from external assessments (e.g., Red/Purple Team, penetration testing).

Incident Response Coordination

• Partner with SOC and engineering teams to ensure effective execution of the Cyber Incident Response Plan (CIRP).
• Facilitate tabletop exercises, after-action reviews, and response drills aligned with

  NIST 2.0

  .

Vendor & Stakeholder Management

• Coordinate security vendor evaluations, POCs, onboarding, and performance reviews.
• Work with 3rd party consultants, auditors, and MDR service providers to ensure timely delivery of contracted services.
• Act as liaison between technical teams and leadership to manage expectations and ensure strategic alignment.

Continuous Improvement & Governance

• Maintain and update project governance structures to align with industry best practices.
• Champion continuous improvement by assessing and refining project methodologies, tools, and templates.
• Contribute to policy updates, compliance audits, and control gap remediation plans.

Required Skills & Qualifications:

• Bachelors degree

  in Cybersecurity, Information Technology, or related field.

• 8+ years of IT experience

  with a minimum of

  3–5 years in a dedicated cybersecurity or InfoSec project management role

  .
• Proven success delivering complex, cross-functional security projects in

  manufacturing, healthcare, or enterprise environments

  .
• Strong understanding of

  cybersecurity domains

  including cloud security, endpoint protection, identity management, and threat detection.
• Familiarity with

  GRC processes, compliance audits, and risk frameworks

  (NIST, ISO, CIS, HIPAA, GDPR).
• Proficiency in

  project management tools

  (e.g., Jira, MS Project, Smartsheet) and

  reporting dashboards

  (e.g., Power BI, Tableau).
• Exceptional

  written and verbal communication skills

  , including executive-level presentation and documentation abilities.

Preferred Certifications:

• PMP, PRINCE2, or equivalent Project Management certification
• CISSP, CISM, or CISA (strongly preferred)

Certified ScrumMaster (CSM) or other Agile experience a plus