Sr. InfoSec Program Manager

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Sr. InfoSec Program Manager based in the United States.

This role serves as the operational foundation of a growing information security program, helping transform security initiatives into measurable business outcomes. You will work at the intersection of cybersecurity, program management, compliance, and executive communication to ensure security priorities are delivered effectively. The position focuses on coordinating initiatives, improving visibility through metrics and reporting, and strengthening organizational readiness for audits and regulatory requirements. You will partner with security, IT, engineering, legal, and compliance teams to drive alignment and operational excellence. This is an opportunity for a security-focused program leader who enjoys bringing structure, clarity, and accountability to complex environments. The role offers a flexible work environment where strategic thinking, communication, and collaboration are highly valued.

Accountabilities: Own the execution of the security program roadmap by coordinating initiatives, tracking milestones, identifying blockers, and ensuring progress across security functions.

Manage cross-functional dependencies with Engineering, IT, Legal, Compliance, and other stakeholders while acting as an operational partner to security leadership.

Develop and maintain security metrics frameworks, dashboards, and reporting processes covering areas such as vulnerability management, incident response, audit findings, and security awareness.

Translate technical and operational data into clear narratives and presentations for executive leadership, board reporting, customer security reviews, and audit committees.

Coordinate audit readiness activities, including evidence collection, documentation management, and tracking remediation efforts for compliance frameworks such as SOC 2, ISO 27001, and PCI-DSS.

Manage security policy lifecycle processes, including reviews, approvals, version control, and accessibility.

Support security awareness initiatives, phishing simulations, training programs, vendor administration, and MSSP relationship coordination.

Improve operational efficiency by establishing repeatable processes, maintaining visibility into program performance, and reducing administrative burden on security leadership.

Requirements

5–8 years of experience in information security, IT program management, security operations coordination, or a related field.

Strong understanding of cybersecurity frameworks and compliance standards, including NIST CSF, SOC 2, ISO 27001, and PCI-DSS.

Proven experience managing cross-functional programs in regulated, compliance-driven, or technology-focused environments.

Experience coordinating security audits, managing evidence collection, and tracking remediation activities.

Strong written and verbal communication skills with the ability to create executive-level reports and communicate complex security topics clearly.

Ability to organize multiple initiatives, manage priorities independently, and drive execution without requiring constant oversight.

Experience working with security tools, vendors, compliance teams, and internal stakeholders.

Preferred experience in financial services, fintech, SaaS, or other regulated industries.

Familiarity with GDPR, NIS2, DORA, SEC cybersecurity disclosures, or public-company audit processes is a plus.

Certifications such as PMP, CISM, or CISSP are preferred.

Benefits

Flexible remote-first work environment with the option to work from home or office locations.

Comprehensive healthcare coverage options based on location.

Retirement and pension plan contributions.

Stock plan participation opportunities.

Life insurance and disability coverage.

Generous paid time off, company holidays, and volunteer time off.

Home office setup allowance.

Learning and development opportunities, including e-learning access, tuition reimbursement, and innovation programs.

Optional benefits such as pet insurance, identity theft protection, and legal assistance.

Opportunity to contribute to meaningful cybersecurity initiatives within an innovative and collaborative environment.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1