VP, Program Manager - Global Information Security

The VP of Information Security Program Management is a senior delivery leader responsible for the health, governance, and execution of the Information Security program portfolio. This is not a traditional project coordination role — we are looking for a highly assertive program executive with strong presence who can operate effectively in a complex, fast-moving environment. The right candidate drives execution, challenges weak plans, surfaces uncomfortable truths early, and ensures risks and issues are addressed before they impact delivery.

The role sits within the Cybersecurity COO organization and carries dual accountability: owning the day-to-day delivery of the Information Security portfolio while simultaneously building and maturing the program management operating model that the function runs on. This leader will inherit a function in active transformation — navigating an organizational redesign, a Global Capability Center build, a vendor optimization program, and the stand-up of Data Security and AI Security capabilities.

• Own the integrated Information Security delivery portfolio, maintaining a unified, real-time view of all programs and projects including status, milestones, dependencies, risks, decisions, and resource utilization.
• Build and maintain standardized dashboards, scorecards, and executive reporting that are readily accessible to leadership and key stakeholders.
• Track and monitor portfolio health; ensure risks and issues are escalated with sufficient lead time for leadership action.
• Own the CISO portfolio reporting and escalations process — ensuring the right information reaches the right audience at the right cadence.
• Drive accountability across stakeholders; ensure actions, decisions, and commitments are tracked transparently and closed on time.
• Establish a communications plan for delivery reporting, defining report types, audiences, and cadences that support efficient delivery without unnecessary overhead.
• Coordinate security-related initiatives across the portfolio including identity and access management, SSO, PAM, segregation of duties, security operations, network security, physical security, application onboarding, and regulatory readiness.
• Define, implement, and continuously improve the Information Security program management operating model — establishing the frameworks, templates, tools, and governance routines the function operates on.
• Collaborate with IT organizations across the firm to identify and adopt best practices; ensure Information Security delivery standards are aligned with broader technology organization norms.
• Establish and lead recurring governance forums with the CISO leadership team where portfolio health, risks, and priorities are reviewed.
• Serve as a neutral point of alignment, ensuring objectivity and balance across delivery areas.
• Lead and develop a team of Project Managers and Business Analysts embedded across the Information Security portfolio with influence rather than authority.
• Set clear performance expectations; hold team members accountable to delivery quality, stakeholder engagement, and professional conduct.
• Model a 'trust but verify' mindset — coaching PMs to validate status through evidence and data rather than accepting optimistic self-reporting.
• Lead the annual Information Security investment planning cycle end-to-end, from demand intake and business case development through prioritization, budget submission, and approval.
• Maintain alignment between strategic priorities and funded initiatives throughout the year, surfacing gaps, over-allocations, and trade-off decisions to leadership in real time.
• Partner with Finance and the Cybersecurity COO to track actuals vs. plan; produce variance analysis and…