Information Security Program Manager

Harris Computer

. Develop and implement client information security programs meeting business, regulatory, and industry requirements .

Posted 10/27/2026full-timeUnited StatesMid-LevelSenior💰 $105,000 - $120,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and implementing information security programs, advising on security strategy, and managing compliance with frameworks such as NIST and ISO/IEC. Proven ability to lead security assessments, incident response, and security awareness training while ensuring the confidentiality, integrity, and availability of client systems.

Highest-signal resume keywords

Information Security LeadershipSecurity OperationsVulnerability ManagementNIST CSF ComplianceCISSP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Policy DevelopmentDisaster Recovery PlanningRisk AssessmentVulnerability ScanningPenetration TestingData Protection TechnologiesIncident ResponseSecurity AuditsControl ImplementationNetwork Segmentation

Soft Skills

Cross-Functional CollaborationExecutive CommunicationTraining Development

Tools & Technologies

EncryptionTokenizationData Loss PreventionSecure Coding

Certifications & Qualifications

CISSPCISMCCSPCRISCCISA

Industry Keywords

HIPAAPCI DSSSOC 2ISO/IEC 27001Regulated Industries

About the role

Key responsibilities & impact

Develop and implement client information security programs meeting business, regulatory, and industry requirements
Advise executive leadership on information security strategy, policies, standards, and procedures
Update client executives on security plan progress, emerging threats, and actual or potential security incidents
Develop and maintain security policies and procedures protecting the confidentiality, integrity, and availability of client systems and data
Monitor client security programs and environment changes to keep controls effective and risks minimized
Oversee implementation of security solutions to improve overall security posture
Develop, maintain, and coordinate testing of disaster recovery and business continuity plans
Develop, deliver, and monitor security awareness training programs
Work within cross-functional teams to develop and deliver secure solutions
Lead or participate in client steering committees and working groups
Coordinate with client security teams on incident detection, response, and resolution within agreed SLAs
Lead internal, vulnerability, and third-party risk assessments and support client security audits
Conduct security reviews of new and existing systems and recommend improvements
Ensure administrative, technical, and physical safeguards protect client systems and information
Advise clients on NIST CSF, ISO/IEC 27001/27002, HIPAA, SOC 2, PCI DSS, and other applicable frameworks and regulations
Assess control gaps and maturity and help clients prioritize remediation
Support client audits, assessments, and certifications by clarifying controls, coordinating evidence, and addressing findings
Define scope and maintain segmentation and protection controls for regulated data environments
Oversee vulnerability scanning and penetration testing programs
Maintain cross-framework control mappings and support compensating-control and risk-acceptance documentation

Requirements

What you’ll need

At least five years of information security leadership experience, such as CISO, vCISO, or senior security leadership
At least three years of experience in security operations, security engineering, vulnerability management, or system administration
Consulting or managed services experience supporting multiple clients across regulated industries (e.g., healthcare, financial services, government contracting)
At least three years of hands-on experience implementing and operating controls for frameworks such as NIST, ISO/IEC 27001, HIPAA, SOC 2, or PCI DSS
Experience serving as the security point of contact during external audits and assessments (e.g., ISO/IEC 27001, SOC 2, PCI DSS, HIPAA)
Experience scoping regulated systems and data, identifying required controls, and reducing scope through data classification and network segmentation
Knowledge of risk management frameworks and methodologies (e.g., NIST RMF, NIST SP 800-30, ISO/IEC 27005, ISO 31000, and FAIR), with experience applying them to risk assessment, treatment, and reporting
Experience with data protection technologies (encryption, tokenization, data loss prevention, secure coding)
Bachelor's degree in Computer Science, Information Systems, Network Security Engineering, or a related field, or equivalent work experience
Must have CISSP (Certified Information Systems Security Professional)
CISM, CCSP, CGRC, PCI ISA, HCISPP, CMMC Certified Professional (CCP), CRISC, CISA, and CIPT are preferred or highly preferred

Benefits

Comp & perks

Eligibility for bonus or merit program
Health benefits
RRSP matching
Stock option
Career development opportunities