Information Security Program Manager

Fisher Investments • Tampa, FL

3d • Onsite

About The Position

Fisher Investments is seeking a Cyber Resilience & Assurance Program Manager to establish and mature a strategic cybersecurity program focused on validating security controls, operational readiness, technology platforms, AI security safeguards, and cyber resilience programs. The role offers the opportunity to build the program from the ground up, working across the firm to develop assessment methodologies, governance frameworks, resilience exercises, executive reporting, and long-term strategies.

The position partners with business and technology teams to assess security effectiveness, analyze attack paths and organizational readiness against evolving threats, identify improvement opportunities, and strengthen the firm’s cyber resilience. It also contributes to the program’s roadmap, strategy, and maturity.

Requirements

• At least 3 years of experience with modern attack methodologies.
• Experience helping build or mature Security Assurance, Cyber Resilience, Threat Emulation, Security Validation, Adversarial Validation, Red Team, or Purple Team capabilities.
• Experience conducting security assessments, attack simulations, adversarial exercises, or threat-led testing activities.
• Experience working in financial services, wealth management, banking, insurance, or another highly regulated industry.
• Familiarity with Red Team or Purple Team work involving cyber resilience exercises, security control validation, and operational readiness assessments.
• Experience evaluating new technologies, including cloud and frontier AI security controls.
• Understanding of threat actor tactics, techniques, and procedures (TTPs).
• Working knowledge of the MITRE ATT&CK Framework.

Nice To Haves

• Experience helping build or mature Security Assurance, Cyber Resilience, Threat Emulation, Security Validation, Adversarial Validation, Red Team, or Purple Team capabilities.
• Experience as a Red Team or Purple Team member conducting security assessments, attack simulations, adversarial exercises, or threat-led testing activities.
• Experience with cloud security testing or emerging technology security assessments.
• Experience working in financial services or other highly regulated environments.
• OSCP, OSEP, CRTP, or CRTE certification.
• GPEN, GCIH, or GDAT certification.
• CEH or PenTest+ certification.
• Cloud or security architecture certifications.

Responsibilities

• Help build and mature the Cyber Resilience & Assurance program.
• Develop governance frameworks, standards, operating procedures, and assessment methodologies.
• Establish validation approaches for cybersecurity controls, operational readiness, technology platforms, and cyber resilience activities.
• Evaluate security controls across identity, infrastructure, network, cloud, application, and AI environments.
• Support threat-informed security assessments, attack simulations, exercises, and security validation activities.
• Analyze attack paths, control effectiveness, and organizational readiness against evolving threats.
• Develop metrics, scorecards, and executive reporting to measure cyber resilience and security effectiveness.
• Work with business and technology partners to identify improvement opportunities and strengthen cyber resilience.
• Contribute to the program’s long-term roadmap, strategy, and maturity.

Benefits

• 100% paid medical, dental, and vision premiums for the employee and qualifying dependents.
• A 50% 401(k) match, up to the IRS maximum.
• 20 days of PTO, plus 10 paid holidays.
• Eight weeks of paid primary caregiver leave.
• $10,000 fertility, family-forming, and hormonal health assistance.
• Back-up child, adult, and elder care.
• Learning and development framework customized for each employee.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed