Information Security Program Manager
Core
Build and mature a strategic Cyber Resilience & Assurance program to validate security controls, operational readiness, and AI safeguards across the firm.
Role type
Senior IC Information Security Program Manager (Cyber Resilience & Assurance)
Builds
Governance frameworks, assessment methodologies, resilience exercises, and executive reporting for cyber resilience.
Domain
Financial Services / Wealth Management / Cybersecurity
Required skills
Cyber resilience program management, security control validation, threat-informed security assessments, attack simulation design, MITRE ATT&CK framework application, executive reporting, cloud security evaluation, AI security safeguards, adversarial validation, Red Team/Purple Team collaboration
Preferred skills
Red Team or Purple Team member experience, cloud security testing, emerging technology security assessments, OSCP/OSCP/CRTP/CRTE/GPEN/GCIH/GDAT/CEH/PenTest+ certifications, security architecture certifications
Technologies
MITRE ATT&CK, Cloud platforms, AI security tools
Responsibilities
Develop governance frameworks and assessment methodologies, establish validation approaches for security controls, evaluate control effectiveness across identity/infrastructure/network/cloud/AI, support threat-informed assessments and attack simulations, analyze attack paths and organizational readiness, develop metrics and executive reporting, contribute to long-term program strategy and roadmap
Seniority
Senior, hands-on IC
