Cybersecurity Program Lead - NY Metro (Hybrid)

Grameen America, Inc.; New York (NY); On-site; USD 105,000 - 115,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Paid Holidays, vacation and sick time

401K retirement savings plans

Flexible Spending Account (FSA)

Wellness platform with 2 free coaching

Opportunity for advancement

Job summary

Grameen America seeks an experienced Cybersecurity Manager to lead the program, work with our MSP and vCISO, and own the security roadmap across our nonprofit operations in the New York tri-state area.

You will oversee audits, risk assessments, policy governance, and awareness training, ensuring regulatory compliance including NYDFS and NIST controls, while coordinating with technical and business stakeholders.

Qualifications

• A degree in Information Security, Cybersecurity, Computer Science, Information Technology, or related field.
• Minimum of 5 years of cybersecurity, information security, risk management, or related experience.
• Experience managing cybersecurity programs, audits, risk assessments, or compliance initiatives.
• Experience working with external vendors, managed service providers, and consulting partners.
• Demonstrated project management experience with the ability to manage multiple initiatives simultaneously.

Responsibilities

• Own and execute the Information Security and Cybersecurity Program and roadmap in partnership with the CTO and vCISO, aligning priorities to organizational goals.
• Lead cybersecurity initiatives from planning through completion, including timelines, dependencies, maturity tracking, and program reporting.
• Serve as the primary point of contact for technology audits, cybersecurity assessments, regulatory reviews, and penetration tests, coordinating evidence and responses.
• Manage remediation of findings through completion and support compliance with applicable requirements, including NYDFS and NIST-based controls.
• Partner with the vCISO to conduct cybersecurity due diligence and risk reviews for new and existing third-party vendors.
• Maintain cybersecurity policies, standards, procedures, and governance documentation in alignment with regulatory requirements and industry best practices.
• Lead risk assessments, maintain the cybersecurity risk register, and report key metrics, risk indicators, and program status.
• Lead organization-wide cybersecurity awareness and phishing training and promote a culture of security awareness across the organization

Skills

Project management

Vendor management

Cybersecurity knowledge

Risk management

Education

Bachelor's degree in Information Security or related field

Tools

Azure

AWS

Job description

Grameen America seeks an experienced Cybersecurity Manager to lead the program, work with our MSP and vCISO, and own the security roadmap across our nonprofit operations in the New York tri-state area.

You will oversee audits, risk assessments, policy governance, and awareness training, ensuring regulatory compliance including NYDFS and NIST controls, while coordinating with technical and business stakeholders.