Information Security Program Manager

Fisher Investments • Plano, TX

2d • Onsite

About The Position

Fisher Investments is seeking a Cyber Resilience & Assurance Program Manager to establish and mature a strategic cybersecurity program focused on validating security controls, operational readiness, technology platforms, AI security safeguards, and cyber resilience programs. The role offers an opportunity to build the program from the ground up while partnering across the firm to create assessment methodologies, governance frameworks, resilience exercises, executive reporting, and long-term strategies.

The Program Manager will assess security effectiveness across identity, infrastructure, network, cloud, application, and AI environments. They will support threat-informed assessments, attack simulations, exercises, and security validation activities; analyze attack paths and organizational readiness against evolving threats; and develop metrics and reporting to measure cyber resilience. The role also works with business and technology partners to identify improvement opportunities and advance the program's roadmap and maturity.

This is an in-office role. Depending on role, tenure, and performance eligibility, the employee may have the opportunity to participate in the company's hybrid work-from-home program, which is subject to change.

Requirements

• Understanding of threat actor tactics, techniques, and procedures (TTPs).
• Working knowledge of the MITRE ATT&CK Framework.
• At least 3 years of experience with modern attack methodologies.
• Experience helping build or mature Security Assurance, Cyber Resilience, Threat Emulation, Security Validation, Adversarial Validation, Red Team, or Purple Team capabilities.
• Experience conducting security assessments, attack simulations, adversarial exercises, or threat-led testing activities.
• Experience working in Financial Services, Wealth Management, Banking, Insurance, or other highly regulated industries.
• Familiarity acting as a Red Team or Purple Team member in cyber resilience exercises, security control validation, and operational readiness assessments.
• Experience evaluating new technologies, including cloud and frontier AI security controls.

Nice To Haves

• Experience helping build or mature Security Assurance, Cyber Resilience, Threat Emulation, Security Validation, Adversarial Validation, Red Team, or Purple Team capabilities.
• Experience as a Red Team or Purple Team member conducting security assessments, attack simulations, adversarial exercises, or threat-led testing activities.
• Experience with cloud security testing or emerging technology security assessments.
• Experience working in Financial Services or other highly regulated environments.
• OSCP, OSEP, CRTP, or CRTE certification.
• GPEN, GCIH, or GDAT certification.
• CEH or PenTest+ certification.
• Cloud or security architecture certifications.

Responsibilities

• Help build and mature the Cyber Resilience & Assurance program.
• Develop governance frameworks, standards, operating procedures, and assessment methodologies.
• Establish validation approaches for cybersecurity controls, operational readiness, technology platforms, and cyber resilience activities.
• Evaluate security controls across identity, infrastructure, network, cloud, application, and AI environments.
• Support threat-informed security assessments, attack simulations, exercises, and security validation activities.
• Analyze attack paths, control effectiveness, and organizational readiness against evolving threats.
• Develop metrics, scorecards, and executive reporting to measure cyber resilience and security effectiveness.
• Work with business and technology partners to identify improvement opportunities and strengthen cyber resilience.
• Contribute to the long-term roadmap, strategy, and maturity of the Cyber Resilience & Assurance program.

Benefits

• 100% paid medical, dental, and vision premiums for the employee and qualifying dependents.
• A 50% 401(k) match, up to the IRS maximum.
• 20 days of PTO and 10 paid holidays.
• Family support programs, including 8 weeks of Paid Primary Caregiver Leave, $10,000 in fertility, family-forming, and hormonal health assistance, and backup child, adult, and elder care.
• Learning and development framework customized for each employee.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: No Education Listed