Information Security Program Manager
Core
Build and mature a strategic Cyber Resilience & Assurance program using Red/Purple Team methodologies to validate security controls, operational readiness, and AI safeguards.
Role type
Senior IC Cyber Resilience & Assurance Program Manager (Red/Purple Team)
Builds
Cyber Resilience & Assurance program, governance frameworks, assessment methodologies, and executive reporting
Domain
Financial Services / Wealth Management / Cybersecurity
Required skills
Red Team experience, Purple Team experience, threat emulation, adversarial validation, security control validation, attack path analysis, MITRE ATT&CK framework knowledge, threat actor TTPs, security assessment design, executive reporting, cloud security evaluation, AI security safeguards
Preferred skills
OSCP, OSEP, CRTP, CRTE, GPEN, GCIH, GDAT, CEH, PenTest+, cloud security architecture, security architecture
Technologies
MITRE ATT&CK, cloud platforms, AI security tools
Responsibilities
Develop governance frameworks, standards, and operating procedures; Establish validation approaches for security controls and operational readiness; Evaluate effectiveness of controls across identity, infrastructure, network, cloud, application, and AI environments; Support threat-informed security assessments, attack simulations, and exercises; Analyze attack paths and organizational readiness; Develop metrics, scorecards, and executive reporting; Contribute to long-term strategy and maturity roadmap
Seniority
Senior, hands-on IC