Cybersecurity Program Manager

First Hawaiian Bank•Honolulu, HI

About The Position

First Hawaiian Bank is seeking a Cybersecurity Program Manager to join its Cybersecurity Division. The role manages compliance, security awareness and training, governance, financial and budget activity, and project management tracking and reporting. It supports the CISO in planning and governing delivery of the Bank’s cybersecurity strategy and objectives. The position tracks and analyzes core activities across Identity Access Management (IAM), Cyber Operations, and Security Architecture, and maintains a RACI role matrix clarifying accountability across Cybersecurity and IT. It maintains program analytics and metrics, prepares committee and internal reports for CISO review, organizes audit responses, maintains the division’s compliance program, liaises with second-line risk counterparts, and supports readiness for regulatory reviews. The role leads delivery of the Cybersecurity Division Annual Control Maturity Assessment and develops and leads the Cyber Risk Quantification Program (CRQ). In collaboration with the CISO, it prepares strategic cybersecurity updates for senior executives. The schedule is Monday through Friday, 8:00 AM to 5:00 PM, though hours may vary. Compensation is $110,000–$140,000 per year, commensurate with experience.

Requirements

Bachelor’s degree in Cybersecurity, an IT-related field, or Business Management, or equivalent experience.
Five years of cyber project management-related experience working on complex cybersecurity projects.
Five years of experience with cybersecurity or IT reporting, oversight, and supporting program management, risk management, compliance, and/or governance.
Five years of progressive experience in cybersecurity, information security, IT governance, risk management, compliance, audit, program management, or a related field.
Five years of experience managing enterprise-level programs, governance processes, or strategic initiatives.
Experience developing executive-level reporting, metrics, dashboards, and presentations.
Experience supporting audits, regulatory examinations, risk assessments, or compliance programs.
Experience managing projects and coordinating activities across multiple stakeholders and business functions.
Experience tracking budgets, forecasts, expenses, or financial reporting for technology or business programs.
Strong analytical, critical-thinking, and problem-solving skills, including the ability to assess complex issues and recommend practical solutions.
Excellent planning, organizational, and project management skills, including the ability to manage multiple priorities and deadlines.
Advanced proficiency in Microsoft 365 applications, including Excel, PowerPoint, Word, and collaboration tools.
Strong written, verbal, presentation, and interpersonal communication skills, including the ability to communicate effectively with technical and non-technical audiences.
Ability to develop executive-level reports, dashboards, metrics, and presentations that support strategic decision-making.
Ability to build collaborative relationships and partner effectively with business, technology, risk, compliance, audit, and vendor stakeholders.
Skill in facilitating meetings, governance forums, and cross-functional discussions to drive results.
Ability to exercise sound judgment, maintain confidentiality, and handle sensitive information professionally and discreetly.
Strong attention to detail, accountability, and follow-through.
Ability to work effectively in a fast-paced, evolving environment with changing priorities and competing demands.
Strong time management, stakeholder management, negotiation, and influencing skills.
Demonstrated track record of delivering high-quality results and driving continuous improvement. Required experience may be obtained concurrently.

Nice To Haves

Master’s degree in Cybersecurity, Information Security, Business Administration (MBA), Risk Management, or a related field.
Ten or more years of experience in cybersecurity, information security, governance, risk, or compliance functions.
Experience in a technical field such as cybersecurity, project management, management information systems, program structure or development, business analytics, requirements definition, or similar work.
Experience within banking, financial services, or other highly regulated industries.
Experience planning, preparing, coordinating, and/or delivering training to users of information management systems.
Experience in innovation and leadership to grow and expand current programs.
Experience with cyber risk quantification methodologies and control frameworks, such as NIST CSF 2.0.

Responsibilities

Manage Cybersecurity Division compliance, security awareness and training, governance, financial and budget activity, and project management tracking and reporting.
Support the CISO in planning and governing delivery of the Bank’s cybersecurity strategy and objectives.
Track and analyze core Cybersecurity Division activities across Identity Access Management (IAM), Cyber Operations, and Security Architecture.
Create and update the RACI role matrix for responsibilities across Cybersecurity and IT.
Maintain analytics and metrics related to work across the cybersecurity program.
Prepare committee and internal reports for review by the CISO.
Organize and prepare responses to audits.
Maintain the Cybersecurity Division compliance program.
Act as liaison to second-line risk counterparts on behalf of the Cybersecurity Division.
Support team readiness for regulatory reviews.
Lead and deliver the Cybersecurity Division Annual Control Maturity Assessment.
Develop and lead the Cyber Risk Quantification Program (CRQ).
Collaborate with the CISO to prepare strategic cybersecurity updates for senior executives.