Senior Manager, Cybersecurity Programs

Overview

The Senior Manager, Security Assurance will be responsible for leading security assurance initiatives and driving compliance with various security frameworks.

This role is ideal for an individual with extensive experience in cybersecurity frameworks and audits, including HITRUST, SOC, ISO 27001, NIST, and PCI DSS. The successful candidate will also have the ability to facilitate external audits and collaborate with cross-functional teams to enhance our security posture.

As a Senior Manager, Security Assurance, you will lead and manage security assurance programs, ensuring compliance with regulatory and internal standards. You will oversee, coordinate, and facilitate external audits and collaborate with auditors to provide necessary documentation and responses.

You will assess and identify gaps in security controls and develop strategies for remediation and improvement. Additionally, you will serve as a subject matter expert on security frameworks and help influence the organization's security strategy.

Responsibilities

• Lead and manage security assurance programs, ensuring compliance with regulatory and internal standards.
• Oversee, coordinate, and facilitate external audits and collaborate with auditors to provide necessary documentation and responses.
• Assess and identify gaps in security controls and develop strategies for remediation and improvement.
• Serve as a subject matter expert on security frameworks and help influence the organization's security strategy.
• Develop and implement security standards and policies in alignment with organizational objectives and industry best practices.
• Conduct risk assessments and vulnerability assessments to evaluate the security posture of the organization and its assets.
• Collaborate with IT, Legal, and Compliance teams to ensure coherent security practices across the organization.
• Review change management requests to ensure alignment with compliance frameworks and security standards, providing recommendations for mitigating potential risks associated with proposed changes.
• Collaborate with cross-functional teams to assess security compliance requirements in contracts, offering guidance and support in drafting, negotiating, and reviewing contractual terms related to data protection and security compliance measures.
• Prepare and present regular updates to senior leadership on the status of security assurance initiatives and audit findings.
• Stay informed of industry trends, threats, and regulatory changes affecting information security.

Requirements

• 7-10 years of experience in information security, with a focus on security assurance and compliance (HIPAA experience highly preferred).
• Bachelor's degree in Computer Science, Information Technology, Security Management, or a related field (Master's degree preferred).
• In-depth knowledge of security frameworks and standards such as HITRUST CSF, SOC 1/2, ISO 27001, NIST, PCI DSS, etc.
• Proven experience in managing and leading external audit engagements, including preparation, facilitation, and follow-up.
• Strong analytical and problem-solving skills, with the ability to assess complex security issues and implement effective solutions.
• Exceptional communication and interpersonal skills with the ability to engage and influence stakeholders at all levels.
• Experience in project management and the ability to prioritize and manage multiple initiatives simultaneously.
• Proven experience with compliance software and external audit portals for evidence posting and collaboration.
• Knowledge of audit cycles and certifications for cloud-hosted applications, AI experience a plus.
• Relevant security certifications and framework certifications (e.g., CCSFP, CISM, CISSP, CISA, CRISC, ISO Lead Auditor, PCIP) are highly desirable.