Cyber Security Program Manager

S&P Global•New York, NY

2d•Hybrid

About The Position

This role involves leading and managing multiple cybersecurity programs and initiatives across the organization, ensuring alignment with business objectives and regulatory requirements. The position requires developing and executing comprehensive program roadmaps for security transformation projects, risk mitigation efforts, and compliance initiatives. Collaboration with cross-functional teams including IT, Legal, Compliance, and Business units is essential for implementing security controls and governance frameworks. The role also drives continuous improvement of security processes and metrics, providing executive-level reporting on program status and risk posture. Additionally, the position involves building reporting dashboards using Power BI and implementing Power Automate solutions to streamline departmental processes and enhance team efficiencies.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent work experience
7-10 years of experience in cybersecurity program management, project management, or security operations with demonstrated ability to create KPIs and OKRs, and familiarity with AWS cloud environments
Strong knowledge of cybersecurity frameworks such as NIST Cybersecurity Framework (CSF), ISO 27001, SOC 2, or similar regulatory standards
Proficiency in Microsoft Power Platform tools including Power BI for dashboard creation, Power Automate for process automation, and Power Apps for application development
Experience with risk management tools and methodologies including vulnerability management platforms, GRC tools, or security assessment technologies
Professional certifications such as PMP, CISSP, CISM, or equivalent program management credentials

Nice To Haves

Advanced degree (Master's) in Cybersecurity, Information Systems, Business Administration, or related field
Experience with cloud security platforms such as AWS Security Hub, Azure Security Center, or Google Cloud Security Command Center
Knowledge of additional cybersecurity frameworks and standards including CIS Controls, COBIT, or industry-specific regulations (SOX, GDPR)
Experience with CI/CD security integration tools such as Fortify, Mend, GitHub, Jenkins, or similar DevSecOps platforms

Responsibilities

Lead and manage multiple cybersecurity programs and initiatives across the organization, ensuring alignment with business objectives and regulatory requirements
Develop and execute comprehensive program roadmaps for security transformation projects, risk mitigation efforts, and compliance initiatives
Collaborate with cross-functional teams including IT, Legal, Compliance, and Business units to implement security controls and governance frameworks
Drive continuous improvement of security processes and metrics, providing executive-level reporting on program status and risk posture
Build reporting dashboards using Power BI and implement Power Automate solutions to streamline departmental processes and enhance team efficiencies