Information Security Program Manager

American Tower; Honolulu (HI); On-site; USD 110,000 - 160,000; Full time

Job summary

American Tower is seeking an Information Security Program Manager to lead and coordinate our information security program, directing audits, risk assessments, and controls deployment across functional teams. You will shape security policy, collaborate with business and technology leaders, and drive resource-aligned project portfolios.

You will partner with stakeholders across the organization to prioritize initiatives, manage the roadmap, and ensure standards in security configurations while

Qualifications

• Bachelor's degree in Information Systems or Computer Science or equivalent work experience.
• Minimum of 5 years IT, network security, or IT audit experience.
• Experience with general computer controls and security topics.
• Experience developing, documenting, and maintaining access and security policies, processes, procedures, and standards.
• Strong project/program management skills, including organizing, planning, and executing from vision through implementation of large-scale programs and projects involving internal personnel, contractors, and vendors.
• Knowledge of information security standards (e.g., ISO 27001/27002, NIST) and data privacy and compliance regulations (e.g., GDPR, HIPAA).
• Ability to lift up to 25 lbs; approximately 10% travel may be required.

Responsibilities

• Review proposals or plans to determine projects’ time frames, funding limitations, procedures for completing, staffing requirements, and allotment of available resources to various phases.
• Run projects/programs from design and development to production by using program and project management theories, methods, and techniques applicable to managing and delivering programs or projects.
• Perform control and vulnerability assessments to identify weaknesses, assess the effectiveness of existing controls, and recommend enhancements.
• Protect systems by defining access privileges, control structures, and resources.
• Serve as a point of contact for IT and innovation teams to address control questions and assess control impacts on projects.
• Facilitate and coordinate ongoing reviews and audits with identified business owners and ensure appropriate actions are taken based on the information gathered during those reviews.
• Other duties as assigned.

Skills

Project management

Communication

Risk assessment

Security policies

Cross-functional collaboration

Time management

Education

Bachelor's degree in Information Systems or Computer Science

Job description

Information Security Program Manager

We are seeking an Information Security Program Manager to join American Tower’s Information Security organization. The Information Security team maintains and enhances the information security program. Day to day, you will plan, direct, and coordinate security‑related initiatives, including audits and risk assessments, assist with deploying various controls, and develop processes to ensure standards across the security configurations. You will work closely with business and technology leaders to prioritize, sequence proposed projects, identify trade‑offs, and obtain resource allocations to optimize the execution of the portfolio of information security projects within the program roadmap.

American Tower is a global digital infrastructure company serving customers through tower sites and other real estate solutions that support connectivity and opportunity, focused on achieving our vision of Building a More Connected World. Our success is rooted in the potential of our people and the power of local teams at our offices and sites across 25 countries. We are one of the largest global Real Estate Investment Trusts (REIT) and a publicly traded (NYSE:AMT), Fortune 500 Company headquartered in Boston, Massachusetts.

What You Need to Succeed

• Bachelor's degree in Information Systems or Computer Science or equivalent work experience required
• Minimum of 5 years of IT, network security, or IT audit experience required
• Experience with general computer controls and security topics required
• Experience developing, documenting, and maintaining access and security policies, processes, procedures, and standards preferred
• Strong project/program management skills, including organizing, planning, and executing from vision through implementation of large‑scale programs and projects involving internal personnel, contractors, and vendors required
• Knowledge of access, security, and control risk assessment methods and technologies and/or audit experience required
• Knowledge of information security standards (e.g., ISO 27001/27002, NIST, etc.) and data privacy and compliance regulations (e.g., GDPR, HIPAA, etc.) required
• Ability to lift up to 25 lbs
• Approximately 10% travel may be required
• Strong written and oral communication skills, including the ability to present ideas and suggestions clearly and effectively
• Ability to work with different functional groups and levels of employees to effectively and professionally achieve results
• Strong organizational skills; ability to accomplish multiple tasks within the agreed‑upon timeframes through effective prioritization in a fast‑paced environment

Responsibilities

• Review proposals or plans to determine projects’ time frames, funding limitations, procedures for completing, staffing requirements, and allotment of available resources to various phases.
• Run projects/programs from design and development to production by using program and project management theories, methods, and techniques applicable to managing and delivering programs or projects.
• Perform control and vulnerability assessments to identify weaknesses, assess the effectiveness of existing controls, and recommend enhancements.
• Protect systems by defining access privileges, control structures, and resources.
• Serve as a point of contact for IT and innovation teams to address control questions and assess control impacts on projects.
• Facilitate and coordinate ongoing reviews and audits with identified business owners and ensure appropriate actions are taken based on the information gathered during those reviews.
• Other duties as assigned.

American Tower is proud to be an equal opportunity employer and will not discriminate against an applicant or employee based on age, sex, sexual orientation, gender identity, race, color, creed, religion, national origin or ancestry, citizenship, marital status, familial status, disability, military or veteran status, genetic information, pregnancy, reproductive decisions, or any other characteristic protected under applicable law.