Position Summary:
The Security Program Manager is responsible for driving the execution of cybersecurity programs. This role works closely with the CISO to translate strategy into action by managing security frameworks, compliance initiatives, and ongoing risk mitigation efforts. The Security Program Manager ensures that both internal and client environments maintain a strong security posture enabling our MSSP and CISOaaS offerings to deliver measurable value and trusted outcomes.
What you will be doing as a Security Program Manager.....
- Partner with the CISO to operationalize the compliance frameworks like CIS Implementation Groups, NIST CSF. ISO 27001, or similar frameworks across client environments.
- Develop, implement, and track cybersecurity program roadmaps, policies, and procedures.
- Coordinate with internal teams and client stakeholders to ensure compliance with regulatory and contractual obligations.
- Manage security assessments, audits, and gap analyses, and oversee remediation plans.
- Establish repeatable processes for security governance, risk management, and compliance (GRC).
- Provide regular reporting and metrics to leadership and clients on program performance and risk posture.
- Act as a liaison between CISO, technical operations teams, and client executives.
Key Metrics:
- Cloud environment availability and uptime
- Program Execution: % completion of CIS IG control implementation along with other compliance frameworks
- Compliance Readiness: Number of compliance gaps identified vs. remediated within target timelines.
- Risk Reduction: Measured reduction in outstanding high-risk findings over time.
- Reporting: On-time delivery of dashboards, scorecards, and executive updates.
- Client Engagement: Client satisfaction scores (where applicable for CISOaaS clients).
You are a great Security Program Manager candidate if.....
- Bachelor's degree in Information Security, Computer Science, Business, or related field (or equivalent experience).
- 2+ years of experience in cybersecurity, IT governance, risk management, or compliance.
- Familiarity with CIS Critical Security Controls, NIST CSF, ISO 27001, SOC2 or similar frameworks.
- Strong program/project management skills with proven ability to drive initiatives to completion.
- Experience working in or with MSSPs, Managed Services, or client-facing security roles preferred.
- Excellent communication and stakeholder management skills (executive and technical audiences).
- Relevant certifications a plus (CISM, CISSP, CRISC, or similar.)
Perks of working here as a Security Program Manager:
- WFH Flexibility
- Focus on Work/Life Balance
- We match 4% on your 401K
- Paid Time Off Benefits - 3 weeks for your first year, 4 weeks on your second year
- Comprehensive benefits package which includes paid life insurance and paid long term disability
- FitOn membership - providing free access to many local gyms and studios
- Paid Maternity, Paternity and foster leave
- Quarterly employee/family outings
- Career Path road mapping
- $200 spend in our iVenture Company Store on your anniversary year with us as well as upon joining our team
- Real Culture initiatives and recognition, not just pizza parties
- 360 degree feedback. You talk, we listen.
- Mileage reimbursement
- Super cool technology – virtual lab, paid certifications and training days
- iVenture is rated by its employees as a "Great Place to Work" and has a strong culture and exceptional core values
