Cybersecurity Program Manager

Support, develop, and continuously improve Minitab's global Information Security Management System (ISMS). Contribute to the full lifecycle of the ISO 27001-certified program, including policy development, risk management, compliance oversight, audit coordination, third-party risk management, incident response, and business continuity.

Partner cross-functionally to ensure security governance is embedded throughout business operations and aligned with organizational objectives.

• Direct and support programs, policies, and daily practices to ensure continued compliance with ISO 27001.

• Maintain alignment with privacy, legal, HR, operational, and reporting obligations.

• Support governance oversight, corrective action planning, and continuous improvement initiatives.

• Contribute to change management efforts, including integration of newly acquired entities.

• Monitor and interpret relevant cybersecurity laws, regulations, and industry frameworks.

• Perform information security risk assessments and evaluate control environments.

• Develop remediation plans and collaborate with IT, Operations, HR, Legal, Risk Management, and senior leadership to implement corrective actions.

• Maintain documentation to support regulatory and audit requirements.

• Respond to customer security questionnaires and due diligence requests.

• Conduct and manage vendor risk assessments.

• Maintain documentation required for contractual and regulatory compliance.

• Participate in business continuity planning activities.

• Support incident response efforts and post-incident reviews.

• Assess operational impact of cybersecurity incidents and contribute to mitigation and recovery planning.

• Develop and maintain the company's security awareness and training program.

• Promote a culture of cybersecurity and privacy awareness across the enterprise.

• 5+ years of experience working with Information Security Management Systems (ISMS), including ISO 27001 or similar frameworks;
  Big 4 consulting experience highly desired.

• Bachelor's degree in a related field preferred; equivalent experience will be considered.

• Familiarity with cybersecurity frameworks and Risk Management Framework (RMF).

• Knowledge of cybersecurity and privacy laws, regulations, and compliance standards.

• Experience conducting security risk assessments and developing remediation plans.

• Strong technical writing, analytical, and governance skills.

• Project management experience preferred.

• Relevant certifications such as CISSP, CISM, or equivalent are a plus.

• Fluent in English (read, write, speak).

• Ability to work on-site daily or remotely with regular travel to company offices as required.

• Willingness to travel to State College, PA monthly for onboarding during the first 6 months of employment and as needed thereafter.

HEALTH INSURANCE
:
Medical, Dental, and Vision Insurance is provided at no cost for full-time employees upon date of hire. Low co-pay pharmacy benefit and affordable family coverage plan is available. Short and Long Term Disability is fully paid by Minitab. Employee Assistance Program (EAP) – Provides guidance for personal issue and information on other Work Life Matters.

LIFE INSURANCE
:
Group Term Life Insurance is provided at no cost for full-time employees at three times employee base salary. Minitab provides eligible employees the opportunity to purchase Voluntary Life Insurance for themselves and eligible dependents at affordable rates.

RETIREMENT PLANNING
: A 401(k) Retirement Plan with T. Rowe Price is provided with eligible employee contribution immediately. Minitab will match dollar for dollar up to the first 6% of employee's contribution. Employees are fully vested in the Minitab, LLC 401(k) Retirement Plan upon date of hire.

PAID TIME OFF
:
Paid holidays, as well as 4 weeks of annual paid time off are provided. The annual paid time off increases one week every five years.

HIGHER AND PROFESSIONAL…