Program Manager, Managed Services - CampusGuard

Campus Guard, a Nelnet Company, provides information security services for campus-based organizations including higher education institutions, healthcare providers, city, county and state government agencies and hospitality markets. As a full-service information security firm, we leverage our knowledge combined with the industry standards for compliance and information security issues to provide our customers with world class information security & compliance services.

Campus Guard is a cybersecurity and compliance firm that has partnered with hundreds of colleges and universities since 2009 to build, mature, and sustain compliance programs - PCI DSS, GLBA, HIPAA, CMMC, FERPA, Nacha/ACH, and more - across higher education, healthcare, government, financial services, and SaaS/technology organizations. What sets us apart isn't just technical depth; it's that we understand the culture, governance, and decentralization of the environments we serve.

You'll work alongside a credentialed team - QSAs, PMPs, PCIPs, and security engineers - with deep roots in higher education and senior security leadership supporting every engagement.

** Please note that we are unable to provide visa sponsorship for this position. To be considered, candidates must already be authorized to work in the United States without the need for current or future sponsorship.*
* ** Key Responsibilities*
* ** Program Development & Consulting*
* + Assess a customer's current compliance posture and design a scalable, right-sized program that fits their size, structure, budget, and risk tolerance.

+ Author the program's foundational artifacts - charter, governance structure, policies, roles and responsibilities, escalation paths, and compliance calendar - and establish merchant/departmental inventories, scope definitions, and data flow documentation.

+ Define the metrics and reporting cadence by which the customer's leadership will judge the program's health, and advise on organizational placement - who owns compliance and what committee it reports through.

** Program Management (Managed Services)*
* + Lead the planning, execution, and delivery of customer PCI DSS, GLBA, and related compliance initiatives, applying a hybrid (predictive and adaptive) methodology that adapts to shifting scope, personnel turnover, and evolving standards.

+ Develop and maintain schedules, work breakdown structures, RACI matrices, and risk/issue logs, coordinating stakeholders - IT, security, treasury/bursar, athletics, advancement, financial aid, and vendors - across a decentralized institution.

+ Own the annual compliance lifecycle (scoping, evidence collection, SAQ/AOC, ASV scans, remediation tracking) and serve as the customer's primary point of contact, maintaining artifacts in Campus Guard Central®.

** Capability Transfer & Enablement*
* + Train and coach customer staff - compliance coordinators, departmental merchant contacts, IT and security personnel - to operate the program independently.

+ Develop customer-facing playbooks, runbooks, checklists, and templates that outlive the engagement.

+ Structure engagements with a deliberate handoff in mind, defining what "self-sufficient" means for each customer and managing toward it.

** vISO Engagement Support (Virtual Information Security Officer)*
* + Support senior Campus Guard advisors delivering fractional Information Security Officer services, drafting and maintaining security policies and procedures against applicable frameworks (PCI DSS, GLBA, NIST CSF/SP 800-171, HIPAA).

+ Assemble and facilitate risk assessments, translating technical findings into business-language, budget-aware remediation roadmaps, and prepare materials for governance, leadership, and audit committees.

+ Contribute to third-party/vendor risk reviews, incident response plan maintenance, and tabletop exercise facilitation.

** Internal Contribution*
* + Partner with Campus Guard's QSAs, assessors, and security engineers to ensure customer deliverables are accurate, timely, and consistent with our standards.

+ Contribute to service delivery methodology, templates, and continuous improvement of the Managed Services practice.

+ Support scoping and…