Cybersecurity Strategy & Program Sr. Manager; HYBRID

Cybersecurity Strategy & Program Sr. Manager (HYBRID)

HUNT VALLEY, MD, US, 21031

The Cybersecurity Strategy & Program Sr. Manager serves as the connective tissue between security leadership, technical teams, and the broader business, ensuring security is embedded into every decision. This role turns vision into action, orchestrates high‑impact security initiatives, streamlines governance, and ensures alignment with business objectives.

• Partner with the CISO to define, track, and communicate the company’s cybersecurity strategy, priorities, and progress.
• Lead cross‑functional security programs—such as enterprise risk & program assessments, compliance readiness, and data protection improvements.
• Develop and maintain executive‑level dashboards, metrics, and reports that translate complex security metrics into clear business insights.
• Coordinate security governance forums, steering committees, and leadership briefings.
• Ensure alignment between security initiatives and business objectives, working closely with IT, EA, corporate security, strategic risk, legal, and cybersecurity teams.
• Provide decision‑making support through analysis and recommendations and escalation of cyber risk decisions to appropriate committees.
• Manage stakeholder relationships, serving as a proxy or gatekeeper for the CISO, and synthesizing information for executive decisions.
• Drive continuous improvement in security processes, documentation, and communication.
• Assist the CISO in developing and implementing a comprehensive cybersecurity strategy aligned with business objectives and industry standards.
• Collaborate with other departments to ensure a cohesive approach to cybersecurity across the organization.
• Support strategic business initiatives, hold PMs accountable for delivery, and provide reporting of status to the CISO and governance committees.
• Manage agenda, membership, reporting, and tracking of actions for cybersecurity governance meetings, and facilitate escalation of risk decisions.
• Research and develop content for communications needed by the CISO for governance committees, audit committee, board reports, C‑suite executives, and various stakeholders.
• Oversee the development, review, and regular stakeholder reporting of cybersecurity dashboards and metrics, collaborating across teams to ensure relevance.
• Facilitate external program & cybersecurity risk assessments, analyze outputs, identify gaps, prioritize actions, and adjust strategy roadmaps accordingly.

• Bachelor’s degree in computer science, information security, engineering, Business Management or related field.
• Certifications such as CGEIT, CISSP, CISA, CRISC, CISM, or similar are strongly preferred.
• 10‑12 years of experience in cybersecurity program management, governance, risk, and compliance (GRC) or a related field.
• Experience conducting or facilitating assessments or audits, coordinating with auditors, and implementing audit recommendations.
• Broad and comprehensive knowledge of cybersecurity domains is required.
• Strong understanding of security frameworks (e.g., NIST CSF, ISO 27001, CIS Controls) and regulatory requirements (e.g., GDPR, HIPAA, SOX).
• Exceptional written and verbal communication skills—able to translate complex technical security concepts into business language for executives and stakeholders.
• Proven ability to manage multiple high‑priority initiatives in a fast‑paced environment.
• Experience with project management and collaboration tools, GRC platforms, and data visualization tools like Power BI or Tableau.
• Collaborative mindset with the ability to influence without direct authority.
• High ethical standards and a commitment to confidentiality and integrity.
• Ability to work effectively individually in a leadership role and with all levels of the organization.

• Career growth opportunities.
• Flexibility and support for diverse life stages and choices.
• Well‑being programs.

Base salary compensation will be determined based on factors such as geographic location, skills, education, experience for this role, and/or internal equity of our current employees as part of any final offer. This position is also…