IT Security Program Manager. Chicago Move Collective

IT Security Program Manager

The IT Security Program Manager will drive all IT security related initiatives, and be responsible for the roadmap for IT Security. You will interface with key business stakeholders and IT leaders to understand business and security goals, and subsequently develop a strategy for IT Security projects. With buy in from stakeholders, you'll prioritize a portfolio of projects into a roadmap, as it relates to various IT Security initiatives.

In parallel, you'll partner with key personnel to ensure the successful delivery on this roadmap. The current IT Security initiatives include:

• Third Party Vendor/Supplier Risk Management
• Security scorecards
• Inside Threat Management
• Security Metrics and Reporting
• Security Education Training and Awareness
• DLP
• Privacy
• Compliance
• Audits
• Merger & Acquisition

What you'll be doing:

• Gather and examine customer and internal security team needs and opportunities for new information security programs, processes, and controls
• Identify and coordinate the interdependencies among programs, products and other critical initiatives across all security sub-departments within our organization
• Expand sphere of influence in driving security initiatives across the company
• Accountable and responsible for overflow responsibilities from senior security leadership (CISO)
• Identify, define and implement security programs across security and the company
• Track and provide reporting and measurements of program effectiveness and communicate findings to management
• Develop repeatable, scalable, efficient, and effective processes and programs
• Evaluate the cybersecurity capabilities of 3rd parties and vendors to assess residual risk
• Assist with Incident Response Planning, Customization, Training, and Testing

Skills we're seeking:

• 8+ years of experience in IT
• 5+ years of experience in IT Security specifically
• 3+ years of experience managing IT Security projects and roadmaps
• 2+ years of experience with GRC
• Must have experience with frameworks such as COBIT, NIST, ISO/IEC 27001, ITIL, etc.

Nice to have experience:

• Previous technical experience with Network Security or Cybersecurity
• Relevant security certifications such as CISSP, CEH, CISA, etc.