Cybersecurity Project/Program Manager

Top Skills' Details

This client's Technology Services assesses risk. Increasing levels of regulatory requirements demand additional risk management rigor, and we must implement highly resilient, reliable, and effective solutions that meet and, in some cases, exceed performance standards found in other information rich industries.

Reporting to this client's Director of Technology Risk, you will determine risk assessment methodology and work with stakeholders across Technology Risk to implement and execute. You will ensure that the company has the right methodologies, processes, technology, and reporting capabilities to enable effective insight into technology risks and provide senior leadership with areas of heightened residual risk exposure.

Provide cybersecurity program management, team leadership, and security modernization project management.

Implement program and project frameworks that streamline processes, enhance accountability, and drive on-time, on budget completion. Manage stakeholder communications to drive alignment with project goals.

Employee Value Proposition (EVP)

The workload is solid for many years to come. As long as the funding doesn't get interrupted, this contractor could be on staff for years.

Description

− Provide strategic leadership in multimillion cybersecurity program spanning multiple security modernization projects.

− Lead project teams in security modernization initiatives, security vulnerability management, incident management, user access management, cyber threat remediation, business continuity, end of service life and sensitive data protection.

− Oversee major cybersecurity project planning, funding, scheduling, task prioritization, quality, and deliverables.

− Manage multimillion dollar projects involving upgrades to software, database, and server impacting multiple applications.

− Build, motivate, and coach cross-functional teams to achieve high-quality deliverables. Establish a positive environment focused on shared goals and collaboration with a culture of excellence.

− Provide funding for new software development projects and hardware/software upgrades.

− Oversee end of service life (EOSL) and asset management projects to drive the elimination of out-of-date assets by addressing aging hardware, operating systems, and third-party software.

− Lead payment card industry (PCI) projects to identify and remediate internet-facing security vulnerabilities.

− Ensure sensitive data protection, including encryption and masking of sensitive data to avoid risk exposure.

− Serve as SME, leveraging expertise in cybersecurity operations, incident response/recovery, risk management, secure software development, PKI, and cryptography, among others. Assisted in SOX audit and FIM audit of ITGC.

− Mentor Program Managers and Project Managers regarding best practices, processes, and industry changes.

− Oversee team documentation, training materials, compliance, and governance.

− Managed program financial forecasting, reporting, and fund reallocation during leave of absence of primary.

Skills

Program management, Information security, Risk assessment, Security, Project management, Cyber security, Agile

Top Skills Details

Program management,Information security,Risk assessment,Security,Project management,Cyber security,Agile

Additional Skills & Qualifications

5+ years of work experience in technology, operational risk management, or a related discipline at a global company

5+ years of work experience in risk, control and governance disciplines (e.g. Risk Management, Audit, Information Security, Regulatory Compliance)

Experience designing, implementing, and sustaining risk assessment programs, including:

Risk documentation expectations

CMMI Maturity assessments

Risk assessment processes

GRC solutions design, configuration, and administration

Risk training and awareness

Experience with the following technologies strongly preferred:

Strongly rated skills in:

Documentation and guidance creation.

Problem solving and program execution.

Knowledge of information and technology risk management policies, methods, standards, frameworks, tools, and processes (e.g. COBIT, NIST, ITIL) as well as knowledge of compliance, legal, internal / external audit & regulatory requirements (e.g., SOX, PCI)

Effective at navigating large corporations and governance structures.

Ability to work collaboratively and contribute to high performing teams.

This Hiring Manager's new leadership team comes from the Banking and Finance world and are all about understanding and managing technology risk. Need to provide someone who looks at things through that lens.