Senior Manager – Program Management, Information Security

The Senior Manager - Program Management will serve as the central program owner for all Information Security initiatives across the organization. This role is responsible for driving execution, coordination, and delivery of complex, cross-functional security programs spanning cloud and infrastructure security, application security, GRC, and security operations.
The role acts as a force multiplier for the CISO and InfoSec leadership, ensuring InfoSec initiatives are well-planned, well-coordinated, and well executed for on-time delivery, by working closely with Engineering, Product, Infrastructure and with external vendors.

WHAT YOU WILL BE DOING:
• Own and manage the end-to-end delivery of InfoSec programs and initiatives, including security roadmaps, strategic initiatives, and regulatory-driven efforts.
• Establish and maintain program plans, milestones, dependencies, risks, and success metrics across multiple security workstreams.
• Identify, manage, and mitigate program risks, blockers, and cross-team dependencies.
• Manage weekly and bi-weekly team meeting logistics
• Track progress, surface risks early, and drive issue resolution to ensure timely and high-quality delivery.
• Provide regular program status updates, dashboards, and executive-level reporting to the CISO and senior leadership.
• Liaise between InfoSec and cross-functional organizations such as Product, Engineering and Infrastructure teams to drive intended results
• Drive security issue remediation programs, ensuring findings from vulnerability scans, audits, pentests and assessments are tracked, prioritized, and remediated in partnership with engineering teams.
• Facilitate alignment on scope, timelines, ownership, and dependencies for security-related initiatives across teams.
• Manage the logistics for all vendor engagements, including securing necessary approvals, scheduling meetings, and ensuring all prerequisites are satisfied.
• Drive decision-making by clearly articulating trade-offs, risks, and impacts to stakeholders.
• Ensure security initiatives align with business priorities, product timelines, and engineering capacity.
• Operate as a trusted partner to the CISO and InfoSec leadership, helping translate strategy into executable programs.
• Promote a culture of accountability, transparency, and execution excellence within InfoSec initiatives.

WHAT YOU BRING:
• 10+ years of experience in Program Management, Technical Program Management, or related roles.
• 6+ years of experience supporting Information Security, Technology Risk, or Engineering-led programs.
• Strong experience managing cross-functional, multi-threaded initiatives in complex enterprise environments.
• Experience coordinating external vendors, consultants, or security service providers.
• Strong written and verbal communication skills, including executive-level reporting.

Preferred Qualifications:
• Prior experience working in or closely with InfoSec or Engineering teams
• Familiarity with security concepts such as vulnerability management, penetration testing, audits, and risk management.
• Experience in SaaS, cloud-native, or large-scale enterprise environments.
• Certifications such as PMP, PgMP, CSM, SAFe, or equivalent (nice to have).