Cyber Security Program Manager

QuikTrip; Tulsa (OK); On-site; USD 146,000 - 182,520; Full time

Benefits offered by this job

Employee Benefits

Job summary

A leading convenience store chain is seeking a Cyber Security Program Manager to lead their Cyber Security initiatives. This position requires over 8 years of experience in cybersecurity program management, along with a bachelor's degree in a relevant field. The starting salary ranges from $146,000 to $182,520, and benefits are included. The role demands strong leadership skills and the ability to work under pressure, along with excellent communication abilities.

Qualifications

• 8+ years in cybersecurity program management and operations.
• Familiarity with NIST and CIS frameworks.
• Disaster Recovery planning, CSIRT, regulatory compliance desired.

Responsibilities

• Lead and operationalize Cyber Security Program across the corporation.
• Serve as manager of enterprise cybersecurity initiatives.
• Oversee security standards, controls, and compliance.

Skills

Strong understanding of standards, compliance, security

Excellent oral and written communication

Project leadership

Education

Bachelor’s Degree in MIS or Computer Science

Certification as an Information Systems Security Professional (CISM/CISA/CISSP/SANS)

Tools

AD and MS servers

AS400

Security and audit tools

Job description

Overview

Job Title: Cyber Security Program Manager

Job Type: Corporate Office

Date: Feb 20, 2026

Location: TULSA, OK, US, 74134

Responsibilities

1. Lead and operationalize QuikTrip’s Enterprise Cyber Security Program, including development, implementation, and continuous improvement of security strategy, practices, and standards across the corporation and its subsidiaries.
2. Serve as the day-to-day manager of enterprise cybersecurity initiatives—coordinating governance, driving security execution, and ensuring alignment with organizational objectives.
3. Act as the primary cybersecurity leader for QuikTrip’s subsidiaries—ensuring security operations, controls, and governance align with enterprise standards.
4. Support broader regulatory and compliance initiatives such as PCI, contribute to the Enterprise Privacy Program, and operate as the HIPAA Compliance Officer for protected health information.
5. Assist in developing and overseeing QuikTrip’s Enterprise Cyber Security Strategy, practices, and programs; assist in planning and implementing security for all computing hardware and software systems.
6. Assist and advise user departments in appropriate security procedures.
7. Protect the corporate computing infrastructure from unauthorized access and protect the company network from attacks.
8. Oversee the development and maintenance of Information Technology security and compliance standards; set policy on third-party software use and monitor compliance; implement endpoint protection.
9. Assist in the maintenance, development, and operation of QuikTrip’s Privacy program; conduct Privacy-related activities and ensure continuous compliance monitoring.
10. Governance: maintain up-to-date policies and procedures, monitor adherence, and establish a Privacy Committee with cross-enterprise leadership.
11. Ensure Privacy Impact Assessments are conducted across projects and perform regular compliance assessments.
12. Interface with external entities and ensure the Cyber Security program follows industry and governmental standards (PCI, HIPAA).
13. Fill the role of HIPAA Security Officer (HSO) by managing information security policies and procedures for healthcare information systems.
14. Conduct annual PCI audits and present results to the acquirer; conduct risk assessments and report findings to senior management.
15. Develop and produce IT Security metrics for the Board, IT Leadership, and employees; provide security reports on request.
16. Provide security support to the IT department and the company; lead troubleshooting of security issues; provide general security direction and controls for technology groups.
17. Ensure the technical design of major systems includes appropriate security, and conduct risk assessments of new technology and custom applications.
18. Contribute to IT strategic planning and budgeting by analyzing future security needs and making recommendations.

Organization & Reporting

Reports to: Director of Cyber Security (CISO)

Directly Supervises: N/A

Indirectly Supervises: CSOC, GRC, Cyber Security Architect, Cyber Security Engineers and all Cyber Security related roles.

Relationships

Inside the Company: All Information Technology personnel and many other department personnel; high contact with General Counsel.

Outside the Company: Hardware/software vendors, professional service providers, external auditors, and security/disaster recovery organizations.

Position Specifications

The required specifications (education, experience, and skills) are those necessary to hold the position. Desired specifications are those not required but recommended.

• Required education: Bachelor’s Degree, preferably in MIS or Computer Science or equivalent work experience.
• Desired education: Certification as an Information Systems Security Professional (CISM/CISA/CISSP/SANS or equivalent).
• Required experience: 8+ years in cybersecurity program management and operations; familiarity with NIST and CIS frameworks.
• Desired experience: Disaster Recovery planning, CSIRT, regulatory compliance (PCI, HIPAA, Privacy), ITIL.
• Required skills: Strong understanding of standards, compliance, security, disaster recovery; excellent oral and written communication; project leadership.
• Desired skills: AD and MS servers, AS400, security and audit tools, networking and telecommunications experience.

Additional Criteria

Must be able to work under pressure and provide guidance to Information Technology users during crisis modes. On call 24x7. Available by phone and/or email and have access to calendar, contacts, and data while out of the office.

Compensation & Benefits

Starting Salary: $146,000-$182,520

Benefits: Employee Benefits – QuikTrip