Information Security Program Manager

Fisher Investments • Plano, TX

1d • Onsite

About The Position

Fisher Investments is seeking a Cyber Resilience & Assurance Program Manager to establish and mature a strategic cybersecurity program focused on validating security controls, operational readiness, technology platforms, AI security safeguards, and cyber resilience programs. The role offers the opportunity to build the program from the ground up and partner across the firm to develop assessment methodologies, governance frameworks, resilience exercises, executive reporting, and long-term strategies.

The position supports continuous improvement by measuring the effectiveness of security investments and strengthening the firm's overall cyber resilience. It is an in-office role; depending on role, tenure, and performance eligibility, the employee may have an opportunity to participate in the hybrid work-from-home program, which is subject to change.

Requirements

• Experience helping build or mature Security Assurance, Cyber Resilience, Threat Emulation, Security Validation, Adversarial Validation, Red Team, or Purple Team capabilities.
• Experience conducting security assessments, attack simulations, adversarial exercises, or threat-led testing activities.
• Experience working in Financial Services, Wealth Management, Banking, Insurance, or other highly regulated industries.
• Familiarity with cyber resilience exercises, security control validation, and operational readiness assessments.
• Experience evaluating new technologies, including cloud and frontier AI security controls.
• Understanding of threat actor tactics, techniques, and procedures (TTPs).
• Working knowledge of the MITRE ATT&CK Framework.
• At least 3 years of experience with modern attack methodologies.

Nice To Haves

• Experience helping build or mature Red Team, Purple Team, Security Validation, Threat Emulation, or Cyber Resilience capabilities.
• Experience conducting security control validation, detection validation, or cyber resilience exercises.
• Experience with cloud security testing or emerging technology security assessments.
• Experience working in Financial Services or other highly regulated environments.
• OSCP, OSEP, CRTP, or CRTE certification.
• GPEN, GCIH, or GDAT certification.
• CEH or PenTest+ certification.
• Cloud or security architecture certifications.

Responsibilities

• Help build and mature the Cyber Resilience & Assurance program.
• Develop governance frameworks, standards, operating procedures, and assessment methodologies.
• Establish validation approaches for cybersecurity controls, operational readiness, technology platforms, and cyber resilience activities.
• Evaluate security-control effectiveness across identity, infrastructure, network, cloud, application, and AI environments.
• Support threat-informed security assessments, attack simulations, exercises, and security validation activities.
• Analyze attack paths, control effectiveness, and organizational readiness against evolving threats.
• Develop metrics, scorecards, and executive reporting to measure cyber resilience and security effectiveness.
• Work with business and technology partners to identify improvement opportunities and strengthen overall cyber resilience.
• Contribute to the long-term roadmap, strategy, and maturity of the Cyber Resilience & Assurance program.

Benefits

• 100% paid medical, dental, and vision premiums for the employee and qualifying dependents.
• A 50% 401(k) match, up to the IRS maximum.
• 20 days of PTO plus 10 paid holidays.
• Family Support programs, including 8-week Paid Primary Caregiver Leave, $10,000 fertility, family-forming, and hormonal health assistance, and backup child, adult, and elder care.
• Learning and development framework customized for every employee.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed