The VP of Information Security Program Management is a senior delivery leader responsible for the health, governance, and execution of the Information Security program portfolio. This is not a traditional project coordination role — we are looking for a highly assertive program executive with strong presence who can operate effectively in a complex, fast-moving environment. The right candidate drives execution, challenges weak plans, surfaces uncomfortable truths early, and ensures risks and issues are addressed before they impact delivery.
The role sits within the Cybersecurity COO organization and carries dual accountability: owning the day-to-day delivery of the Information Security portfolio while simultaneously building and maturing the program management operating model that the function runs on. This leader will inherit a function in active transformation — navigating an organizational redesign, a Global Capability Center build, a vendor optimization program, and the stand-up of Data Security and AI Security capabilities.
Responsibilities
- Own the integrated Information Security delivery portfolio, maintaining a unified, real-time view of all programs and projects including status, milestones, dependencies, risks, decisions, and resource utilization.
- Build and maintain standardized dashboards, scorecards, and executive reporting that are readily accessible to leadership and key stakeholders.
- Track and monitor portfolio health; ensure risks and issues are escalated with sufficient lead time for leadership action.
- Own the CISO portfolio reporting and escalations process — ensuring the right information reaches the right audience at the right cadence.
- Drive accountability across stakeholders; ensure actions, decisions, and commitments are tracked transparently and closed on time.
- Establish a communications plan for delivery reporting, defining report types, audiences, and cadences that support efficient delivery without unnecessary overhead.
- Coordinate security-related initiatives across the portfolio including identity and access management, SSO, PAM, segregation of duties, security operations, network security, physical security, application onboarding, and regulatory readiness.
- Define, implement, and continuously improve the Information Security program management operating model — establishing the frameworks, templates, tools, and governance routines the function operates on.
- Collaborate with IT organizations across the firm to identify and adopt best practices; ensure Information Security delivery standards are aligned with broader technology organization norms.
- Establish and lead recurring governance forums with the CISO leadership team where portfolio health, risks, and priorities are reviewed.
- Serve as a neutral point of alignment, ensuring objectivity and balance across delivery areas.
- Lead and develop a team of Project Managers and Business Analysts embedded across the Information Security portfolio with influence rather than authority.
- Set clear performance expectations; hold team members accountable to delivery quality, stakeholder engagement, and professional conduct.
- Model a 'trust but verify' mindset — coaching PMs to validate status through evidence and data rather than accepting optimistic self-reporting.
- Lead the annual Information Security investment planning cycle end-to-end, from demand intake and business case development through prioritization, budget submission, and approval.
- Maintain alignment between strategic priorities and funded initiatives throughout the year, surfacing gaps, over-allocations, and trade-off decisions to leadership in real time.
- Partner with Finance and the Cybersecurity COO to track actuals vs. plan; produce variance analysis and reforecast submissions as required.
- Own benefits realization tracking for all approved investments, ensuring outcomes committed to in business cases are measured, reported, and achieved.
- Partner closely with global technology teams to align Information Security delivery with firm-wide technology programs, shared platforms, and enterprise architecture decisions.
- Identify and manage cross-program dependencies between Information Security initiatives and broader technology portfolio commitments.
- Represent Information Security delivery in firm-wide program governance forums; ensure cybersecurity priorities are visible and protected within the broader investment landscape.
- Identify process inefficiencies and control gaps within delivery and governance; recommend and implement targeted improvements that enhance visibility, predictability, and execution speed.
- Facilitate lessons-learned reviews across programs and integrate findings into governance standards and delivery frameworks.
- Champion automation of portfolio management processes using available tooling, reducing manual reporting overhead and improving data quality and timeliness.
Qualifications
- 8+ years of program management experience within Information Security, Cybersecurity, Technology Risk, or Enterprise Technology.
- Demonstrated experience building or leading a PMO or portfolio governance function — not just managing individual programs.
- Experience leading large-scale transformation, integration, or organizational change programs in complex, matrixed environments.
- Strong working knowledge of vendor risk management, security governance, identity and access management, and technology risk.
- Proven experience leading and developing teams of Project Managers and Business Analysts — setting standards, building capability, and managing performance.
- Track record of leading annual investment planning cycles from demand intake through budget submission and approval.
- Experience partnering with senior technology and business leadership and navigating cross-functional dependencies at scale.
- Experience delivering in a global, distributed operating model including coordination with offshore or GCC-based teams.
- Financial services experience strongly preferred; familiarity with regulatory environments, governance standards, and audit readiness is essential.
- Familiarity with AI-assisted PM tooling, portfolio dashboards, and reporting automation preferred.
- PMP certification required or actively in progress; PRINCE2, SAFe, or Agile equivalent a plus.
- CISSP, CISM, or CRISC certification a plus.
Primary Location Full Time Salary Range of $185,000 - $200,000.
#LI-JR1