Security Project Manager – CISO Portfolio Management (Information Security)

Kemper•Downers Grove, IL

5d•Onsite

About The Position

Leads complex cybersecurity and information security initiatives from strategy through implementation and operational acceptance within the company's Agile/SAFe operating model. This is a security delivery leadership role, the incumbent must combine disciplined Agile/SAFe program execution with credible cybersecurity fluency, risk and control judgment, and the ability to drive accountable decisions across technical, business, risk, and third-party stakeholders.

Requirements

10+ years of progressive technology/security program delivery experience, including substantial experience leading complex cybersecurity or highly technical risk programs at enterprise scale and demonstrated delivery within Agile/SAFe environments. Equivalent depth of experience will be considered.
Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, Business, Risk Management, or a related discipline, or equivalent relevant professional experience.
Deep working knowledge of multiple cybersecurity domains and the technical dependencies that shape security implementations.
Required hands-on experience operating in Agile/SAFe environments, including Program Increment planning, backlog and dependency management, Agile ceremonies, cross-team coordination, delivery metrics, and iterative value delivery.
Demonstrated delivery of complex security or highly technical risk programs.
Strong knowledge of cybersecurity risk, security control objectives, technology implementation risk, and control-readiness concepts.
Experience managing programs with regulatory, audit, control, or operational-resilience implications.
Strong command of program/project governance, integrated planning, dependency management, RAID management, financial tracking, vendor management, change management, testing, and operational transition.
Understanding of common security frameworks and control environments sufficient to manage security program dependencies and evidence requirements.
Ability to translate technical security conditions into business impact, risk decisions, priorities, and executive-level communications.
Director-level ownership, judgment, and accountability for outcomes.
Ability to lead through Agile/SAFe ways of working, including servant leadership, facilitation of cross-team commitments, iterative delivery, and transparent management of dependencies and impediments.
Executive communication and concise risk framing.
Independent influence across technical, business, risk, and vendor stakeholders.
Structured decision-making, negotiation, conflict resolution, and clarity in ambiguous multi-team programs.

Nice To Haves

Prior leadership of major IAM, PAM, SOC, GRC, vulnerability/exposure, cloud security, application security, or data-protection transformations.
PMP or comparable program/project management credential.
Advanced SAFe certifications (for example, SAFe Agilist, Release Train Engineer, Lean Portfolio Management, or equivalent) are preferred; practical Agile/SAFe delivery experience is required.
CISSP, CISM, CRISC, or comparable security/risk credential.
Master's degree in cybersecurity, technology management, business, or a related field; experience in regulated enterprises with executive governance, audit, or regulatory commitments.

Responsibilities

Direct end-to-end delivery of enterprise cybersecurity programs such as identity security, GRC, SOC, vulnerability/exposure management, application security, cloud security, and data protection initiatives.
Develop and manage integrated Agile/SAFe delivery plans that connect architecture, engineering, control, testing, change, vendor, and operational-readiness activities; manage cross-team dependencies, Program Increment commitments, milestones, and readiness criteria rather than treating the program as a schedule-only exercise.
Identify and drive resolution of security, technical, control, regulatory, resource, and operational dependencies; escalate material risks with clear decision options.
Establish and operate governance forums, decision rights, Agile/SAFe ceremonies, risk/issue management, financial controls, delivery metrics, and executive reporting appropriate to Director-level accountability.
Translate between engineers, security specialists, risk and control teams, vendors, and business leaders to maintain technically accurate decisions and commitments.
Lead vendor delivery, implementation milestones, readiness, cutover, transition, and operational acceptance in partnership with Procurement and technology owners.
Drive continuous improvement in security delivery practices, portfolio transparency, and benefits realization.