Cybersecurity Program Manager

First Hawaiian Bank•Honolulu, HI

11h•$110,000 - $140,000

About The Position

First Hawaiian Bank is seeking a Cybersecurity Program Manager to join its Cybersecurity Division. The role manages compliance, security awareness and training, governance, financial and budget activity, and project management tracking and reporting for the division. It supports the CISO in planning and governing delivery of the Bank’s cybersecurity strategy and objectives. The position maintains tracking and analysis of core Cybersecurity Division activities across Identity Access Management (IAM), Cyber Operations, and Security Architecture. It creates and updates RACI role matrices to clarify accountability and responsibilities across Cybersecurity and IT; maintains program analytics and metrics; and ensures committee and internal reports are prepared for the CISO’s review. The role also organizes responses to audits, maintains the division’s compliance program, liaises with second-line risk counterparts, and supports readiness for regulatory reviews. The Cybersecurity Program Manager leads delivery of the Cybersecurity Division Annual Control Maturity Assessment and develops and leads the Cyber Risk Quantification Program (CRQ). In collaboration with the CISO, the role prepares strategic cybersecurity updates for senior executives. The stated schedule is Monday through Friday, 8:00 AM to 5:00 PM, with hours that may vary. The pay range is $110,000 to $140,000 per year, commensurate with experience.

Requirements

Bachelor’s degree in Cybersecurity, an IT-related field, Business Management, or equivalent experience.
Five years of cyber project management experience working on complex cybersecurity projects.
Five years of experience with cybersecurity or IT reporting, oversight, and supporting program management, risk management, compliance, and/or governance.
Five years of progressive experience in cybersecurity, information security, IT governance, risk management, compliance, audit, program management, or a related field.
Five years of experience managing enterprise-level programs, governance processes, or strategic initiatives, including executive-level reporting, metrics, dashboards, and presentations; supporting audits, regulatory examinations, risk assessments, or compliance programs; coordinating projects across stakeholders and business functions; and tracking budgets, forecasts, expenses, or financial reporting for technology or business programs. Required experience may be obtained concurrently.
Strong analytical, critical-thinking, and problem-solving skills, including the ability to assess complex issues and recommend practical solutions.
Excellent planning, organizational, and project management skills, including the ability to manage multiple priorities and deadlines.
Advanced proficiency in Microsoft 365 applications, including Excel, PowerPoint, Word, and collaboration tools.
Strong written, verbal, presentation, and interpersonal communication skills, including the ability to communicate effectively with technical and non-technical audiences.
Ability to develop executive-level reports, dashboards, metrics, and presentations that support strategic decision-making.
Ability to build collaborative relationships and partner effectively with business, technology, risk, compliance, audit, and vendor stakeholders.
Skill in facilitating meetings, governance forums, and cross-functional discussions to drive results.
Ability to exercise sound judgment, maintain confidentiality, and handle sensitive information with professionalism and discretion.
Strong attention to detail, accountability, and follow-through.
Ability to work effectively in a fast-paced, evolving environment with changing priorities and competing demands.
Strong time management, stakeholder management, negotiation, and influencing skills.
Demonstrated track record of delivering high-quality results and driving continuous improvement.

Nice To Haves

Master’s degree in Cybersecurity, Information Security, Business Administration (MBA), Risk Management, or a related field.
Ten or more years of experience in cybersecurity, information security, governance, risk, or compliance functions.
Experience in a technical field such as cybersecurity, project management, management information systems, program structure or development, business analytics, requirements definition, or similar work.
Experience within banking, financial services, or other highly regulated industries.
Experience planning, preparing, coordinating, and/or delivering training to users of information management systems.
Experience in innovation and leadership to grow and expand current programs.
Experience with cyber risk quantification methodologies and control frameworks, such as NIST CSF 2.0.

Responsibilities

Manage compliance, security awareness and training, governance, financial and budget activity, and project management tracking and reporting for the Cybersecurity Division.
Support the CISO in planning and governing delivery of the Bank’s cybersecurity strategy and objectives.
Maintain tracking and analysis of core Cybersecurity Division activities across Identity Access Management (IAM), Cyber Operations, and Security Architecture.
Create and update RACI role matrices defining responsibilities across Cybersecurity and IT.
Maintain analytics and metrics related to cybersecurity program work.
Prepare committee and internal reports for review by the CISO.
Organize and prepare responses to audits.
Maintain the Cybersecurity Division’s compliance program.
Act as liaison to second-line risk counterparts on behalf of the Cybersecurity Division.
Support team readiness for regulatory reviews.
Lead delivery of the Cybersecurity Division Annual Control Maturity Assessment.
Develop and lead the Cyber Risk Quantification Program (CRQ).
Collaborate with the CISO to prepare strategic cybersecurity updates for senior executives.