431316 -Security Project manager

Siri InfoSolutions Inc; Marlborough (MA); On-site; USD 120,000 - 180,000; Full time

Job summary

Siri InfoSolutions Inc in Marlborough, MA is seeking a Security Project Manager for a full-time onsite role to lead an enterprise security program spanning applications, technology platforms, data, integrations, tools and third-party services.

You will build a risk-based view of the enterprise attack surface, coordinate security assessments with Infrastructure, Engineering, Legal and Compliance, translate findings into business risk statements, and drive remediation with owners, milestones, and

Qualifications

• Blend of deep cybersecurity knowledge with risk management expertise.
• Strong program management capabilities are required.
• Experience leading enterprise security programs across multiple domains.

Responsibilities

• Lead and operate an enterprise security program focused on applications, platforms, data, integrations and third-party services.
• Build and maintain a risk-based view of the enterprise attack surface across diverse domains.
• Coordinate security assessments and assurance activities across Infrastructure, Cybersecurity, and involved stakeholders.
• Ensure specialists are engaged for priority initiatives including threat modeling, vulnerability assessment, and vendor due diligence.
• Translate technical findings into clear business risk statements and remediation plans.
• Drive remediation of material security gaps with owners, milestones, and governance.

Skills

Cybersecurity

Risk management

Program management

Executive reporting

Job description

Security Project manager (Fulltime Role)

Marlborough, MA (Onsite)

JD-

• Cybersecurity Program Manager / Security Assurance Lead / Enterprise Security Risk & Governance Lead. candidate needs a blend of deep cybersecurity knowledge, risk management expertise, and strong program management capabilities.

Roles & Responsibilities

Core Responsibilities

• Lead and operate an enterprise security program focused on the security posture of applications, technology platforms, data, integrations, tools, and third-party services.
• Build and maintain a risk-based view of the enterprise attack surface, including customer/member applications, team-member tools, SAP and enterprise platforms, infrastructure, data flows, APIs, SaaS products, AI-enabled capabilities, and vendor-managed services.
• Coordinate security assessments and assurance activities across Infrastructure, Cybersecurity, Penetration Testing, application teams, SAP/enterprise platforms, Data and AI, Architecture, Privacy, Legal, Compliance, Internal Audit, Procurement, and third parties.
• Ensure the appropriate specialists are engaged for each priority initiative or exposure, including architecture review, threat modeling, vulnerability assessment, penetration testing, data/privacy review, access review, application/API security review, and vendor due diligence.
• Translate technical findings into clear business risk statements, priorities, remediation plans, and executive decisions.
• Drive remediation of material security gaps by aligning accountable owners, milestones, funding needs, dependencies, and escalation paths.
• Develop and manage the program charter, integrated plan, timeline, governance model, and meeting cadence.
• Maintain an active RAID log-risks, assumptions, issues, and dependencies-and raise material items promptly.
• Produce clear weekly program reporting and executive dashboards covering progress, security posture, assessment coverage, material risks, remediation status, decisions needed, and overall program health.
• Partner with technology and business leaders to prioritize security investments based on enterprise exposure, member/customer impact, business value, operational resilience, regulatory requirements, and risk tolerance.
• Build productive relationships with vendors and service providers; ensure technical, operational, and contractual security obligations are assessed and monitored.