Sr Program Manager, Cybersecurity

Hayward Holdings Inc. (NYSE "HAYW") is one of the leading manufacturers of residential swimming pool equipment in the world, with a significant presence in the commercial pool market that is continuously growing. Hayward designs, manufactures, and markets a full line of residential and commercial pool and spa equipment including pumps, filters, heating, cleaners, salt chlorinators, automation, lighting, safety, flow control and energy solutions at our company owned facilities.

Headquartered in Charlotte, North Carolina, Hayward also has facilities in Tennessee, Arizona, and Rhode Island, Georgia, as well as Canada, Spain, France, Australia, and China.

Hayward is seeking an experienced Senior Program Manager (PM) contractor to lead a strategic, multi-year cybersecurity transformation initiative. This role is responsible for overseeing complex, cross-functional programs that strengthen the organization's security posture across Enterprise IT, Operational Technology (OT), and Internet of Things (IoT) environments; manage technology risk; support regulatory and compliance requirements; and drive the remediation of security incidents, vulnerabilities, audit findings, and control deficiencies.

The Senior PM will partner closely with Cybersecurity, Infrastructure, Enterprise Applications, Legal, Internal Audit, Operations, Engineering, and other business stakeholders to develop and execute the cybersecurity transformation roadmap. This individual will establish program governance, manage executive communications, and provide regular status updates, risk assessments, and strategic recommendations to Hayward's Senior Leadership Team.

Key responsibilities include leading a comprehensive cybersecurity assessment and vendor selection process (RFP); developing and executing a multi-year cybersecurity improvement roadmap; managing cross-functional initiatives across IT, OT, and IoT environments; and coordinating incident response, risk mitigation, and remediation efforts across the enterprise.

Lead enterprise cybersecurity programs, initiatives, and strategic roadmaps that align with business objectives and organizational risk management priorities.

Establish and manage program governance, integrated plans, dependencies, decision logs, metrics, executive reporting, and escalation processes.

Coordinate security initiatives spanning infrastructure, cloud platforms, enterprise applications, identity and access management, data protection, vulnerability management, and third-party risk.

Drive the implementation and continuous improvement of security controls aligned with applicable industry standards and frameworks, such as NIST Cybersecurity Framework, ISO 27001, CIS Controls, and SOC requirements.

Provide program leadership during cybersecurity incidents by coordinating cross-functional work streams, communications, escalations, decision-making, and recovery activities.

Lead post-incident remediation programs by translating findings into clearly owned corrective actions, milestones, dependencies, and measurable closure criteria.

Manage security findings, vulnerability remediation efforts, risk treatment plans, and audit action plans through completion and validation.

Facilitate post-incident reviews and lessons‑learned sessions, identify root causes and control gaps, and drive sustainable process and technology improvements.

Prepare concise executive updates that communicate incident impact, remediation status, risks, decisions, and blockers without exposing unnecessary sensitive technical detail.

Lead full Cybersecurity Assessment Requests for Proposal (RFP), and vendor selection processes from requirements definition through recommendation and contracting. Develop evaluation criteria, scoring models, use cases, due diligence requirements, and stakeholder review processes that support objective supplier selection. Coordinate vendor demonstrations, reference checks, security assessments, commercial evaluations, and final recommendation packages. Partner with Senior Leadership, IT leadership, Cybersecurity, Infrastructure, Enterprise Applications, Legal, Operations, Engineering, and other business stakeholders on contract negotiations, Statements of Work (SOWs), service-level expectations, implementation commitments, and risk provisions.

Manage strategic vendor relationships, performance, risks, issues, and…