Cybersecurity Project Leader

Location: Houston, TX

Travel: This role requires up to 10% travel and involves primarily standard office-based work with limited field exposure in construction environments.

Our client is seeking a Cybersecurity Program Lead to help build, execute, and continuously mature its enterprise cybersecurity program. This role is responsible for translating cybersecurity strategy into repeatable processes, controls, and operational practices that protect the business while enabling continued growth. Working closely with IT, Digital Technology, Infrastructure, and business leaders, the Cybersecurity Program Lead will operationalize security initiatives, strengthen governance, and help establish a scalable cybersecurity program across a rapidly growing organization.

The Cybersecurity Program Lead is responsible for implementing and maturing the organization's cybersecurity program by developing and coordinating policies, standards, controls, and operational initiatives across the enterprise. This role serves as the bridge between cybersecurity strategy and day-to-day execution, ensuring security initiatives are organized, measurable, and effectively integrated throughout the business.

The successful candidate will possess a strong understanding of cybersecurity principles, governance, risk management, and security operations while maintaining a practical, collaborative approach to supporting business objectives.

• Implement, maintain, and continuously improve the enterprise cybersecurity program, including supporting policies, standards, procedures, and governance processes.
• Translate cybersecurity strategy into actionable initiatives, measurable controls, and repeatable operational practices.
• Coordinate cybersecurity projects, milestones, deliverables, and ongoing program activities.
• Track program maturity, risks, remediation efforts, and key performance metrics.
• Maintain cybersecurity documentation, standards, procedures, and executive reporting.

• Coordinate security operations activities, including vulnerability management, security monitoring, and incident response.
• Support cybersecurity risk assessments, control testing, and remediation tracking across the enterprise.
• Assist with identifying, documenting, and mitigating cybersecurity risks.
• Monitor cybersecurity initiatives to ensure timely completion and alignment with organizational priorities.
• Support business continuity through effective security governance and operational oversight.

• Partner with Infrastructure and Systems Administration teams to integrate security into enterprise systems and operational workflows.
• Support Identity and Access Management (IAM) governance, including access reviews, role-based access controls, and privileged access management.
• Collaborate with technical teams to strengthen endpoint security, cloud security, and infrastructure protection.
• Promote secure technology practices throughout the IT environment.

• Support internal and external audit activities, including control validation, documentation, and evidence collection.
• Coordinate vendor risk assessments and third-party cybersecurity reviews.
• Ensure cybersecurity controls align with recognized frameworks such as NIST Cybersecurity Framework (CSF), CIS Controls, and industry best practices.
• Track remediation activities resulting from audits, assessments, and security reviews.

• Partner with IT Infrastructure, Digital Technology, Systems Administration, and business stakeholders to embed cybersecurity into projects and operational processes.
• Coordinate third-party vendors supporting cybersecurity technologies and managed security services.
• Support enterprise security awareness, communication, and user education initiatives.
• Prepare executive-ready metrics, dashboards, and reports communicating cybersecurity program performance and risk posture.

• Bachelor's degree in Cybersecurity, Information Technology, Computer…