C&IS Portfolio and Program Manager

P32HS Point32Health Services Inc; Canton (MA); On-site; USD 155,000 - 233,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Retirement plans

Paid time off

Employer-paid life and disability

Tuition program

Well-being benefits

Full suite of benefits to support care

Job summary

Point32Health is seeking a Cyber & Information Security Portfolio & Program Manager to serve as a senior advisor to the Chief Information Security Officer. You will provide end-to-end portfolio oversight, align initiatives with risk priorities, and drive governance, reporting, and executive communications from Canton, Massachusetts.

This hands-on leadership role requires deep experience, sound judgment, and the ability to operate independently, mentoring the team and partnering with risk,

Qualifications

• 10–12 years of enterprise portfolio management and project management experience, with lidering complex technology/security solutions.
• Experience in healthcare or highly regulated environments preferred.
• Strong financial management, budgeting, forecasting, and resource allocation skills.
• Excellent written and verbal communication for senior leaders and Boards.

Responsibilities

• Oversee end-to-end C&IS initiative portfolio and ensure alignment with risk priorities and objectives.
• Provide project management support for smaller cross-functional initiatives and maintain backlog with executive visibility.
• Identify and implement opportunities to simplify and streamline internal C&IS processes and services.
• Ensure readiness for Enterprise Security, Privacy, and Resiliency Committee and Board meetings with clear narratives.
• Participate in business continuity activities and readiness assessments.
• Mentor team members and advise the CISO on operational risk and improvement opportunities.

Skills

Portfolio management

Program management

Executive communication

Stakeholder engagement

Financial management

Risk management

Decision making

Education

Bachelor's degree in Cybersecurity/IS/CS

Master's degree preferred

Job description

Who We Are

Point32Health is a leading not-for-profit health and well-being organization dedicated to delivering high-quality, affordable healthcare. Serving nearly 2 million members, Point32Health builds on the legacy of Harvard Pilgrim Health Care and Tufts Health Plan to provide access to care and empower healthier lives for everyone. Our culture revolves around being a community of care and having shared values that guide our behaviors and decisions. We’ve had a long-standing commitment to inclusion and equal healthcare access and outcomes, regardless of background; it’s at the core of who we are. We value the rich mix of backgrounds, perspectives, and experiences of all of our colleagues, which helps us to provide service with empathy and better understand and meet the needs of the communities where we serve, live, and work. We enjoy the important work we do every day in service to our members, partners, colleagues and communities. Learn more about who we are at Point32Health.

Job Summary

The Cyber & Information Security Portfolio & Program Manager serves as a senior, trusted advisor to the Chief Information Security Officer (CISO) and is a core member of the Cyber & Information Security leadership team. This role is responsible for the operational, financial, and governance foundation of the C&IS organization—ensuring that security initiatives are well prioritized, effectively executed, and transparently managed. The C&IS Portfolio & Program Manager drives portfolio and program oversight, leads smaller security initiatives, streamlines internal processes, and ensures the organization is fully prepared for executive and Board level engagement. This is a hands-on leadership role requiring deep experience, sound judgment, and the ability to operate independently with minimal direction.

Key Responsibilities/Duties – what you will be doing

• C&IS Portfolio & Program Oversight Provide end-to-end oversight of the C&IS initiative portfolio, ensuring alignment with enterprise risk priorities and strategic objectives. Identify and proactively manage cross-functional dependencies, organizational impacts, and strategic risks that may affect achievement of cybersecurity objectives.


• Project management support for smaller, cross-functional initiatives that do not warrant dedicated project teams. Maintain and actively manage the C&IS enhancement and improvement backlog, ensuring clear prioritization and executive visibility.


• Process Optimization & Operational Excellence Identify, design, and implement opportunities to simplify and streamline internal C&IS processes and services. Establish lightweight, repeatable operating rhythms for planning, execution, reporting, and follow-up. Act as a "fixer" for operational friction points across the organization.


• Governance, Executive & Board Support Ensure readiness for Enterprise Security, Privacy, and Resiliency Committee and Board meetings, including agenda coordination, material preparation, pre-reads, and follow up on committed actions. Translate complex security topics into clear, executive-level narratives and decision points. Track and drive follow-up actions and commitments resulting from executive and Board forums.


• Business Continuity & Preparedness Participate in testing, tabletop exercises, and readiness assessments in partnership with relevant stakeholders. Ensure plans remain aligned with enterprise continuity and crisis management frameworks.


• Leadership & Advisory Responsibilities Serve as a core member of the C&IS leadership team, contributing to strategy, prioritization, and decision-making. Provide objective, candid counsel to the CISO on operational risk, execution challenges, and improvement opportunities. Mentor team members on program discipline, operational rigor, and executive engagement.

Qualifications – what you need to perform the job

• Certification and Licensure (Preferred) Project Management Professional (PMP), Scrum Master, or similar CISSP, CISM, or comparable information security / operational resiliency certification. Lean Six Sigma or similarly recognized certification related to process efficiency /redesign.


• Education Required (minimum) Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related work experience. Preferred: Master’s degree.


• Experience Required (minimum) 10-12 years of progressive experience in enterprise portfolio management, business process optimization, project management, leading complex technology and/or security solutions, preparing materials and presenting to executive audiences, or other relevant experience. Experience working in the healthcare industry and/or within cybersecurity, risk management, compliance, or highly regulated environments preferred.


• Skill Requirements Advanced portfolio and program management skills, including prioritization, dependency management, risk tracking, and outcome-based reporting across multiple concurrent initiatives. Strong operational execution skills, with the ability to translate strategy into actionable plans, establish operating rhythms, and drive follow-through. Strong financial management skills, including portfolio budgeting, project investment management, forecasting, financial performance monitoring, and resource allocation to ensure cybersecurity investments are aligned with strategic priorities and deliver measurable value. Executive communication and stakeholder engagement skills, including the ability to develop clear, concise materials for senior leaders and Boards and facilitate informed decision-making. Exceptional written and verbal communication skills, with the ability to simplify complex security and technology topics for non-technical audiences. Strong judgment, discretion, and decision-making skills, with the ability to operate independently in ambiguous, high-impact situations.

Working Conditions and Additional Requirements

Must be able to work under normal office conditions, work from Canton, Massachusetts office twice weekly (on average), and work from home as required. Work may require simultaneous use of a telephone/headset and PC/keyboard and sitting for extended durations. May be required to work additional hours beyond standard work schedule. The above statements are intended to describe the general nature and level of work being performed by employees assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of employees assigned to this position. Management retains the discretion to add to or change the duties of the position at any time.

Salary Range

$155,125.60 - $232,688.40

Compensation & Total Rewards Overview

The annual base salary range provided for this position represents a range of salaries for this role and similar roles across the organization. The actual salary for this position will be determined by several factors, including the scope and complexity of the role; the skills, education, training, credentials, and experience of the candidate; as well as internal equity. As part of our comprehensive total rewards program, colleagues are also eligible for variable pay. Eligibility for any bonus, commission, benefits, or any other form of compensation and benefits remains in the Company's sole discretion and may be modified at the Company’s sole discretion, consistent with the law. Point32Health offers their Colleagues a competitive and comprehensive total rewards package which currently includes:

• Medical, dental and vision coverage


• Retirement plans


• Paid time off


• Employer-paid life and disability insurance with additional buy-up coverage options


• Tuition program


• Well-being benefits


• Full suite of benefits to support career development, individual & family health, and financial health

For more details on our total rewards programs, visit https://www.point32health.org/careers/benefits/

We welcome all

All applicants are welcome and will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.