C&IS Portfolio and Program Manager

point32health; Canton (MA); On-site; USD 120,000 - 170,000; Full time

Job summary

Point32Health is seeking a senior Cyber & Information Security Portfolio & Program Manager to advise the CISO and lead the C&IS leadership team. The role focuses on prioritization, execution, and transparent governance across security initiatives.

You will drive portfolio oversight, streamline processes, and ensure executive and Board readiness, with hands-on leadership and independent execution.

Qualifications

• 10–12 years of progressive experience in enterprise portfolio management and leadership.
• Experience in healthcare cybersecurity, risk management, or regulated environments is preferred.
• Ability to present to executive audiences and coordinate with boards.

Responsibilities

• Provide end-to-end oversight of the C&IS initiative portfolio with prioritization.
• Identify dependencies, risks, and strategic impacts across cross-functional teams.
• Support smaller projects and maintain the optimization backlog with executive visibility.
• Prepare materials for Enterprise Security and Board meetings and track follow-ups.
• Lead governance, planning rhythms, and business continuity readiness.

Skills

Portfolio management

Program management

Operational risk

Executive communication

Mentoring

Education

Bachelor's degree in Cybersecurity / Information Systems / Computer Science

Master's degree (preferred)

PMP / Scrum Master

CISSP / CISM

Lean Six Sigma

Job description

Who We Are

Point32Health is a leading not‑for‑profit health and well‑being organization dedicated to delivering high‑quality, affordable healthcare. Serving nearly 2 million members, Point32Health builds on the legacy of Harvard Pilgrim Health Care and Tufts Health Plan to provide access to care and empower healthier lives for everyone.

Our culture revolves around being a community of care and having shared values that guide our behaviors and decisions.

We’ve had a long‑standing commitment to inclusion and equal healthcare access and outcomes, regardless of background; it’s at the core of who we are.

We value the rich mix of backgrounds, perspectives, and experiences of all of our colleagues, which helps us to provide service with empathy and better understand and meet the needs of the communities where we serve, live, and work.

Learn more about who we are at Point32Health .

Job Summary

The Cyber & Information Security Portfolio & Program Manager serves as a senior, trusted advisor to the Chief Information Security Officer (CISO) and is a core member of the Cyber & Information Security leadership team.

This role is responsible for the operational, financial, and governance foundation of the C&IS organization‑ensuring that security initiatives are well prioritized, effectively executed, and transparently managed.

The C&IS Portfolio & Program Manager drives portfolio and program oversight, leads smaller security initiatives, streamlines internal processes, and ensures the organization is fully prepared for executive and Board level engagement.

This is a hands‑on leadership role requiring deep experience, sound judgment, and the ability to operate independently with minimal direction.

Job Description

Key Responsibilities/Duties - what you will be doing

C&IS Portfolio & Program Oversight

• Provide end‑to‑end oversight of the C&IS initiative portfolio, ensuring alignment with enterprise risk priorities and strategic objectives.
• Identify and proactively manage cross‑functional dependencies, organizational impacts, and strategic risks that may affect achievement of cybersecurity objectives
• Project management support for smaller, cross‑functional initiatives that do not warrant dedicated project teams.
• Maintain and actively manage the C&IS enhancement and improvement backlog, ensuring clear prioritization and executive visibility.

Process Optimization & Operational Excellence

• Identify, design, and implement opportunities to simplify and streamline internal C&IS processes and services.
• Establish lightweight, repeatable operating rhythms for planning, execution, reporting, and follow‑up.
• Act as a "fixer" for operational friction points across the organization.

Governance, Executive & Board Support

• Ensure readiness for Enterprise Security, Privacy, and Resiliency Committee and Board meetings, including agenda coordination, material preparation, pre‑reads, and follow up on committed actions.
• Translate complex security topics into clear, executive‑level narratives and decision points.
• Track and drive follow‑up actions and commitments resulting from executive and Board forums.

Business Continuity & Preparedness

• Participate in testing, tabletop exercises, and readiness assessments in partnership with relevant stakeholders.
• Ensure plans remain aligned with enterprise continuity and crisis management frameworks.

Leadership & Advisory Responsibilities

• Serve as a core member of the C&IS leadership team, contributing to strategy, prioritization, and decision‑making.
• Provide objective, candid counsel to the CISO on operational risk, execution challenges, and improvement opportunities.
• Mentor team members on program discipline, operational rigor, and executive engagement.

Qualifications - what you need to perform the job

Certification and Licensure (Preferred)

• Project Management Professional (PMP), Scrum Master, or similar
• CISSP, CISM, or comparable information security / operational resiliency certification
• Lean Six Sigma or similarly recognized certification related to process efficiency /redesign

Education

Required (minimum): Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related work experience.

Preferred: Master's degree

Experience

Required (minimum) 10-12 years of progressive experience in enterprise portfolio management, business process optimization, project management, leading complex technology and/or security solutions, preparing materials and presenting to executive audiences, or other relevant experience.

Experience working in the healthcare industry and/or within cybersecurity, risk management, compliance, or highly regulated environments preferred.

Skill Requirements

• Advanced portfolio and program management skills, including prioritization, dependency management, risk tracking, and outcome‑based reporting across multiple concurrent initiatives.
• Strong operational