Information Security Program Manager

Fisher Investments • Tampa, FL

1d • Onsite

About The Position

Fisher Investments is seeking a Cyber Resilience & Assurance Program Manager to establish and mature a strategic cybersecurity program focused on validating the effectiveness of security controls, operational readiness, technology platforms, AI security safeguards, and cyber resilience programs. The role offers the opportunity to build the program from the ground up while working across the firm to develop assessment methodologies, governance frameworks, resilience exercises, executive reporting, and long-term strategies.

The position focuses on measuring the effectiveness of security investments and improving organizational cyber resilience through threat-informed assessments, security validation, and collaboration with business and technology partners. This is an in-office role. Depending on role, tenure, and performance eligibility, there may be an opportunity to participate in the company's hybrid work-from-home program, which is subject to change.

Requirements

• Experience helping build or mature Security Assurance, Cyber Resilience, Threat Emulation, Security Validation, Adversarial Validation, Red Team, or Purple Team capabilities.
• Experience conducting security assessments, attack simulations, adversarial exercises, or threat-led testing activities.
• Experience working within Financial Services, Wealth Management, Banking, Insurance, or other highly regulated industries.
• Familiarity with cyber resilience exercises, security control validation, and operational readiness assessments.
• Experience evaluating new technologies, including cloud and frontier AI security controls.
• Understanding of threat actor tactics, techniques, and procedures (TTPs).
• Working knowledge of the MITRE ATT&CK Framework.
• At least 3 years of experience with modern attack methodologies.

Nice To Haves

• Experience helping build or mature Red Team, Purple Team, Security Validation, Threat Emulation, or Cyber Resilience capabilities.
• Experience conducting security control validation, detection validation, or cyber resilience exercises.
• Experience with cloud security testing or emerging technology security assessments.
• Experience working in Financial Services or other highly regulated environments.
• OSCP, OSEP, CRTP, or CRTE certification.
• GPEN, GCIH, or GDAT certification.
• CEH or PenTest+ certification.
• Cloud or security architecture certifications.

Responsibilities

• Help build and mature the Cyber Resilience & Assurance program.
• Develop governance frameworks, standards, operating procedures, and assessment methodologies.
• Establish validation approaches for cybersecurity controls, operational readiness, technology platforms, and cyber resilience activities.
• Evaluate the effectiveness of security controls across identity, infrastructure, network, cloud, application, and AI environments.
• Support threat-informed security assessments, attack simulations, exercises, and security validation activities.
• Analyze attack paths, control effectiveness, and organizational readiness against evolving threats.
• Develop metrics, scorecards, and executive reporting to measure cyber resilience and security effectiveness.
• Work with business and technology partners to identify improvement opportunities and strengthen overall cyber resilience.
• Contribute to the long-term roadmap, strategy, and maturity of the Cyber Resilience & Assurance program.

Benefits

• 100% paid medical, dental, and vision premiums for the employee and qualifying dependents.
• A 50% 401(k) match, up to the IRS maximum.
• 20 days of PTO and 10 paid holidays.
• Family Support programs, including 8-week Paid Primary Caregiver Leave, $10,000 fertility, family-forming, and hormonal health assistance, and backup child, adult, and elder care.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed