Security Program Manager

Jobgether; India; Remote; INR 2,500,000 - 4,500,000; Full time

Benefits offered by this job

Remote, India

Flexible work options

Health & well-being programs

Professional development

Collaborative, global teams

Autonomy and ownership

Inclusive culture

Job summary

Jobgether on behalf of a partner company in India seeks a Security Program Manager to lead strategic security initiatives, align with business priorities, and strengthen organizational resilience. You will collaborate with IT, engineering, and business teams to embed security into the SDLC, manage vulnerabilities, audits, and incident response.

Strong leadership and communication are essential. The role emphasizes data-driven reporting, risk assessment, and governance across complex environments

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity or related field.
• 7+ years in information security with 3+ years in security program management.
• Experience with Agile or Waterfall project methods.
• Knowledge of NIST, ISO 27001, COBIT and security controls.
• Familiarity with GDPR, CCPA, HIPAA, SOX and regulatory requirements.
• Professional certifications (PMP, CISSP, CISM, CIPP/US) are desirable.

Responsibilities

• Develop and implement comprehensive security programs and roadmaps.
• Lead lifecycle of security projects from planning to reporting.
• Identify, assess, and mitigate security risks across systems and networks.
• Maintain policies and controls aligned with security frameworks.
• Oversee vulnerability management, audits, and remediation efforts.
• Embed security into SDLC and operational processes across teams.
• Deliver security awareness programs and governance reporting.
• Maintain incident response plans and drive ongoing exercises.
• Evaluate new security technologies and drive improvements.
• Prepare metrics and risk updates for senior management.

Skills

Leadership

Communication

Stakeholder management

Project management

Risk assessment

Analytical thinking

Independent work

Education

Bachelor's degree in CS/IT/Cybersecurity

Master's degree preferred

Tools

PMP/CISSP/CISM/CIPP-US

ISO 27001 knowledge

NIST/COBIT frameworks

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Program Manager based in India.

We are seeking an experienced cybersecurity professional to lead strategic security programs and initiatives that protect critical information assets and strengthen organizational resilience. In this role, you will oversee the planning, execution, and continuous improvement of security projects, ensuring alignment with business priorities, industry standards, and regulatory requirements. You will collaborate with IT, engineering, and business teams to identify risks, implement effective controls, and integrate security into operational processes and the software development lifecycle. Your responsibilities will span vulnerability management, incident response, security audits, compliance, and employee awareness. Through data-driven reporting and stakeholder engagement, you will communicate program progress, highlight emerging risks, and drive informed decision-making. This remote opportunity offers the chance to influence enterprise security strategy while working with diverse teams in a dynamic, technology-driven environment.

Accountabilities

• Develop and implement comprehensive security programs, strategies, and roadmaps aligned with organizational objectives, recognized security frameworks, and industry best practices.
• Manage the complete lifecycle of security projects, including planning, resource coordination, execution, monitoring, risk management, and reporting, ensuring delivery within agreed timelines and budgets.
• Lead cross-functional teams in identifying, assessing, prioritizing, and mitigating security risks across systems, applications, networks, and infrastructure.
• Establish, maintain, and improve security policies, standards, procedures, and controls in alignment with frameworks such as NIST, ISO 27001, and applicable regulatory requirements, including GDPR.
• Oversee vulnerability management, penetration testing, and security audit activities, coordinating remediation efforts and tracking progress through to resolution.
• Collaborate with IT, engineering, and business stakeholders to embed security requirements into the software development lifecycle (SDLC) and broader operational processes.
• Develop and deliver security awareness and education programs that promote secure practices and strengthen employee understanding of cybersecurity responsibilities.
• Maintain and improve security incident response plans, procedures, and exercises to support effective detection, response, recovery, and incident resolution.
• Evaluate emerging security technologies and solutions, recommending improvements that enhance organizational security capabilities and operational effectiveness.
• Prepare and present security metrics, program updates, risk assessments, and performance reports to senior management and relevant stakeholders.
• Monitor emerging cyber threats, security technologies, regulatory changes, and industry developments to identify opportunities for continuous improvement.
• Coordinate program priorities and manage dependencies across multiple initiatives while maintaining clear communication, accountability, and alignment with business goals.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field; a master’s degree is preferred.
• At least 7 years of progressively responsible experience in information security, including a minimum of 3 years in security program management.
• Proven experience managing complex cybersecurity programs and projects using established project management methodologies, such as Agile or Waterfall.
• Strong understanding of information security principles, governance frameworks, controls, and industry best practices, including NIST, ISO 27001, and COBIT.
• Broad technical knowledge across application security, network security, cloud security, data protection, and identity and access management.
• Familiarity with regulatory and compliance requirements, including GDPR, CCPA, HIPAA, and SOX.
• Experience overseeing security risk assessments, vulnerability remediation, penetration testing, security audits, and incident response initiatives.
• Relevant professional certifications, such as Project Management Professional (PMP), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Privacy Professional/United States (CIPP/US), or equivalent credentials, are highly desirable.
• Excellent leadership, communication, and interpersonal skills, with the ability to influence stakeholders and collaborate effectively with both technical and non-technical teams.
• Strong analytical and problem-solving abilities, attention to detail, and sound judgment when assessing risks and prioritizing security initiatives.
• Ability to work independently, manage multiple projects and competing priorities, and adapt to changing requirements in a fast-paced environment.
• Strong organizational and reporting skills, including the ability to communicate technical risks, program performance, and recommendations clearly to senior leadership.

Benefits

• Employment type: Full-time position.
• Location: Remote, India.
• Flexible working arrangements: Flexible work options designed to support work-life balance, subject to role and location requirements.
• Health and well-being: Access to benefits, support, and services intended to promote overall employee health and well-being.
• Professional development: Opportunities to expand cybersecurity expertise and contribute to enterprise-wide security initiatives.
• Meaningful impact: Opportunity to influence security strategy, improve organizational resilience, and strengthen risk management practices.
• Collaborative environment: Work alongside global teams and professionals across technology, engineering, and business functions.
• Autonomy and ownership: Scope to lead programs, drive improvements, and contribute to strategic decisions.
• Inclusive culture: A workplace that values diversity, mutual respect, equal opportunity, and merit-based development.
• Salary and additional benefits: Specific compensation figures, healthcare plan details, paid leave entitlements, and other benefits were not specified in the available job description.