Security Program Manager

Accountabilities: Develop and implement comprehensive security programs, strategies, and roadmaps aligned with organizational objectives, recognized security frameworks, and industry best practices. Manage the complete lifecycle of security projects, including planning, resource coordination, execution, monitoring, risk management, and reporting, ensuring delivery within agreed timelines and budgets. Lead cross-functional teams in identifying, assessing, prioritizing, and mitigating security risks across systems, applications, networks, and infrastructure. Establish, maintain, and improve security policies, standards, procedures, and controls in alignment with frameworks such as NIST, ISO 27001, and applicable regulatory requirements, including GDPR. Oversee vulnerability management, penetration testing, and security audit activities, coordinating remediation efforts and tracking progress through to resolution. Collaborate with IT, engineering, and business stakeholders to embed security requirements into the software development lifecycle (SDLC) and broader operational processes. Develop and deliver security awareness and education programs that promote secure practices and strengthen employee understanding of cybersecurity responsibilities. Maintain and improve security incident response plans, procedures, and exercises to support effective detection, response, recovery, and incident resolution. Evaluate emerging security technologies and solutions, recommending improvements that enhance organizational security capabilities and operational effectiveness. Prepare and present security metrics, program updates, risk assessments, and performance reports to senior management and relevant stakeholders. Monitor emerging cyber threats, security technologies, regulatory changes, and industry developments to identify opportunities for continuous improvement. Coordinate program priorities and manage dependencies across multiple initiatives while maintaining clear communication, accountability, and alignment with business goals. Requirements Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field; a master’s degree is preferred. At least 7 years of progressively responsible experience in information security, including a minimum of 3 years in security program management. Proven experience managing complex cybersecurity programs and projects using established project management methodologies, such as Agile or Waterfall. Strong understanding of information security principles, governance frameworks, controls, and industry best practices, including NIST, ISO 27001, and COBIT. Broad technical knowledge across application security, network security, cloud security, data protection, and identity and access management. Familiarity with regulatory and compliance requirements, including GDPR, CCPA, HIPAA, and SOX. Experience overseeing security risk assessments, vulnerability remediation, penetration testing, security audits, and incident response initiatives. Relevant professional certifications, such as Project Management Professional (PMP), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Privacy Professional/United States (CIPP/US), or equivalent credentials, are highly desirable. Excellent leadership, communication, and interpersonal skills, with the ability to influence stakeholders and collaborate effectively with both technical and non-technical teams. Strong analytical and problem-solving abilities, attention to detail, and sound judgment when assessing risks and prioritizing security initiatives. Ability to work independently, manage multiple projects and competing priorities, and adapt to changing requirements in a fast-paced environment. Strong organizational and reporting skills, including the ability to communicate technical risks, program performance, and recommendations clearly to senior leadership. Benefits Employment type: Full-time position. Location: Remote, India. Flexible working arrangements: Flexible work options designed to support work-life balance, subject to role and location requirements. Health and well-being: Access to benefits, support, and services intended to promote overall employee health and well-being. Professional development: Opportunities to expand cybersecurity expertise and contribute to enterprise-wide security initiatives. Meaningful impact: Opportunity to influence security strategy, improve organizational resilience, and strengthen risk management practices. Collaborative environment: Work alongside global teams and professionals across technology, engineering, and business functions. Autonomy and ownership: Scope to lead programs, drive improvements, and contribute to strategic decisions. Inclusive culture: A workplace that values diversity, mutual respect, equal opportunity, and merit-based development. Salary and additional benefits: Specific compensation figures, healthcare plan details, paid leave entitlements, and other benefits were not specified in the available job description.