Information Security Program Manager

Harris Computer; Florida; Hybrid; USD 105,000 - 120,000; Full time

Benefits offered by this job

Health benefits

RRSP matching

Stock options

Career development

Job summary

Harris Computer is seeking an Information Security Leader to drive security programs for diverse clients in the United States. You will advise executives on strategy, policies, and standards, and oversee program risk, compliance, and incident response with a focus on protecting data and systems.

You will coordinate with cross-functional teams, conduct risk assessments, and guide remediation across frameworks like NIST, ISO/IEC 27001, HIPAA, SOC 2, and PCI DSS. A CISSP is expected.

Qualifications

• Leadership in security programs and governance
• Experience with frameworks such as NIST CSF, ISO/IEC 27001/27002, HIPAA, SOC 2, PCI DSS
• Ability to advise executives on strategy, policies, and standards
• Experience conducting risk assessments and audits across multiple clients

Responsibilities

• Security Program Leadership & Operations for clients
• Advises executive leadership on information security strategy, policies, standards, and procedures
• Updates client executives on security plan progress and incidents
• Develops and maintains security policies and procedures
• Oversees vulnerability scanning, risk assessments, and remediation
• Coordinates with client security teams on incident detection and response within SLAs
• Leads or participates in client steering committees and working groups

Skills

Communication

Proficiency

Decision Making

Project Management

Teamwork

Regulatory Compliance Expertise

Thoroughness

Client Relationship Management

Education

Bachelor's degree in Computer Science, Information Systems, Network Security Engineering, or related field

Job description

What you will do

• Security Program Leadership & Operations
• Develops and implements client information security programs that meet business, regulatory, and industry requirements
• Advises executive leadership on information security strategy, policies, standards, and procedures
• Updates client executives on security plan progress, emerging threats, and actual or potential security incidents
• Develops and maintains security policies and procedures that govern the protection of the confidentiality, integrity, and availability of client systems and data
• Monitors client security programs and environment changes to keep controls effective and risks minimized
• Oversees implementation of security solutions to improve overall security posture
• Develops, maintains, and coordinates testing of disaster recovery and business continuity plans that reflect client system and facility needs
• Develops, delivers, and monitors security awareness training programs
• Works within cross-functional teams to develop and deliver secure solutions
• Leads or participates in client steering committees and working groups as needed
• Coordinates with client security teams on incident detection, response, and resolution within agreed service-level agreements (SLAs)

Risk & Compliance Support

• Leads internal, vulnerability, and third-party risk assessments and supports client security audits
• Conducts security reviews of new and existing systems and recommends improvements to systems, policies, and procedures
• Ensures appropriate administrative, technical, and physical safeguards protect client systems and information
• Advises clients on control requirements for NIST CSF, ISO/IEC 27001/27002, HIPAA, SOC 2, PCI DSS, and other applicable frameworks and regulations
• Assesses control gaps and maturity against applicable frameworks and helps clients prioritize remediation
• Supports client audits, assessments, and certifications by clarifying controls, coordinating evidence, and addressing findings
• Defines scope and maintains segmentation and protection controls for regulated data environments (e.g., ePHI, cardholder data, CUI)
• Oversees vulnerability scanning and penetration testing programs aligned with framework and regulatory requirements
• Maintains cross‑framework control mappings and supports compensating‑control and risk‑acceptance documentation

What makes you stand out

• Communication
• Proficiency
• Decision Making
• Project Management
• Teamwork
• Orientation
• Thoroughness
• Client Relationship Management
• Regulatory Compliance Expertise

What are we looking for

Information Security Experience Note: The required qualifications may be satisfied through a combination of the experience areas listed below.

• At least five years of information security leadership experience, such as CISO, vCISO, or senior security leadership
• At least three years of experience in security operations, security engineering, vulnerability management, or system administration
• Consulting or managed services experience supporting multiple clients across regulated industries (e.g., healthcare, financial services, government contracting)
• Compliance & Regulatory Experience
• At least three years of hands‑on experience implementing and operating controls for frameworks such as NIST, ISO/IEC 27001, HIPAA, SOC 2, or PCI DSS
• Experience serving as the security point of contact during external audits and assessments (e.g., ISO/IEC 27001, SOC 2, PCI DSS, HIPAA)
• Experience scoping regulated systems and data, identifying required controls, and reducing scope through data classification and network segmentation
• Knowledge of risk management frameworks and methodologies (e.g., NIST RMF, NIST SP 800-30, ISO/IEC 27005, ISO 31000, and FAIR), with experience applying them to risk assessment, treatment, and reporting
• Experience with data protection technologies (encryption, tokenization, data loss prevention, secure coding)

Required Training and Education

• Bachelor's degree in Computer Science, Information Systems, Network Security Engineering, or a related field, or equivalent work experience

Required Certifications

• Must Have CISSP (Certified Information Systems Security Professional)
• Highly Preferred CISM (Certified Information Security Manager)
• CCSP (Certified Cloud Security Professional)
• CGRC (Certified in Governance, Risk and Compliance)
• Framework-specific credentials such as PCI ISA, HCISPP (HealthCare Information Security and Privacy Practitioner), or CMMC Certified Professional (CCP)
• Additional Preferred CRISC (Certified in Risk and Information Systems Control)
• CISA (Certified Information Systems Auditor)
• CIPT (Certified Information Privacy Technologist)

Compensation Details

The potential salary range for this role is $105,000 to $120,000 per year, with eligibility for bonus or merit program. Final compensation will be based on experience, skills, market conditions, and internal equity.

We offer a competitive Total Rewards program including health benefits, RRSP matching, stock option, and career development opportunities.

This description does not include every duty or responsibility. Role requirements may change based on client needs and service agreements.

At Harris, we believe great people build great software. We offer an environment where employees are empowered to make a real impact, grow their skills, and shape their careers.

Our teams enjoy a supportive, award‑winning culture, a casual and collaborative workplace, and opportunities to learn from a diverse group of businesses and industries.

We are financially strong and proudly part of Constellation Software Inc. (CSI), the largest software company in Canada, providing long‑term stability alongside entrepreneurial autonomy.

In addition to a competitive compensation and benefits package, we offer meaningful perks, flexibility, and—most importantly—a culture that values people, curiosity, and having fun while doing great work.

Follow us on LinkedIn to learn more about our culture, values, and career opportunities.

Harris is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

Applicants who require a reasonable accommodation due to a disability may contact us by email at [e-mail]. Accommodation requests may be made at any time. This email address is dedicated solely to accommodation requests and cannot be used to inquire about application status.

Know Your Rights Poster EO 13496: Notification of Employee Rights under Federal Labor Laws Our commitment to fair and equitable hiring.

As part of our recruitment process, we use artificial intelligence (AI) tools during the initial screening phase to help identify candidates whose qualifications most closely align with the requirements of the role. This technology supports efficiency and consistency in the early stages, but it never replaces human judgement. All subsequent evaluations and final hiring decisions are made by our recruitment professionals. AI does not make final hiring decisions.