Information Security Program Manager

Fisher Investments; Plano (TX); Presencial; USD 140 000 - 180 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Medical coverage for employee and 60%+

401(k) with 50% match

Paid time off (PTO) 20 days + 10 paid

Family support programs including paid

Hybrid work option (in-office role;可能)

Resumo da oferta

Fisher Investments is seeking a Cyber Resilience & Assurance Program Manager to build and mature a strategic cybersecurity program from the ground up. The role focuses on validating security controls, operational readiness, and resilience across identity, network, cloud, AI, and platforms.

You will develop assessment methodologies, governance standards, and executive reporting while partnering across the firm to drive long-term security strategy and measurable improvements in cyber resilience.

Qualificações

• Experience helping build or mature Security Assurance, Cyber Resilience, Threat Emulation, Security Validation, Adversarial Validation, Red Team, or Purple Team capabilities.
• Experience conducting security assessments, attack simulations, adversarial exercises, or threat-led testing activities.
• Experience working within Financial Services, Wealth Management, Banking, Insurance, or other highly regulated industries.

Responsabilidades

• Help build and mature our Cyber Resilience & Assurance program.
• Develop governance frameworks, standards, operating procedures, and assessment methodologies.
• Establish validation approaches for cybersecurity controls, operational readiness, technology platforms, and cyber resilience activities.
• Evaluate the effectiveness of security controls across identity, infrastructure, network, cloud, application, and AI environments.
• Support threat-informed security assessments, attack simulations, exercises, and security validation activities.
• Analyze attack paths, control effectiveness, and organizational readiness against evolving threats.
• Develop metrics, scorecards, and executive reporting to measure cyber resilience and security effectiveness.
• Work with business and technology partners to identify improvement opportunities and strengthen overall cyber resilience.
• Contribute to the long-term roadmap, strategy, and maturity of the Cyber Resilience & Assurance program.
• Understand threat actor TTPs and apply MITRE ATT&CK in assessments.

Conhecimentos

Cyber resilience

Security assurance

Threat emulation

Security validation

Red Team

Purple Team

MITRE ATT&CK

Cloud security testing

AI security controls

Formação académica

OSCP

OSEP

CRTP

CRTE

GPEN

GCIH

GDAT

CEH

PenTest+

Cloud security certifications

Ferramentas

MITRE ATT&CK Framework

Descrição da oferta de emprego

Overview

Fisher Investments is looking for a Cyber Resilience & Assurance Program Manager to help establish and mature a strategic cybersecurity program. With the capability focused on validating the effectiveness of security controls, operational readiness, technology platforms, AI security safeguards, and cyber resilience programs.

The Opportunity:

You will have the unique opportunity to build a program from the ground up while partnering across the firm to develop assessment methodologies, governance frameworks, resilience exercises, executive reporting, and long-term strategies.

If you're passionate about cybersecurity, continuous improvement, and helping organizations measure whether their security investments are truly effective, we'd like to talk with you!

The Day-to-Day:

• Help build and mature our Cyber Resilience & Assurance program
• Develop governance frameworks, standards, operating procedures, and assessment methodologies
• Establish validation approaches for cybersecurity controls, operational readiness, technology platforms, and cyber resilience activities
• Evaluate the effectiveness of security controls across identity, infrastructure, network, cloud, application, and AI environments
• Support threat-informed security assessments, attack simulations, exercises, and security validation activities
• Analyze attack paths, control effectiveness, and organizational readiness against evolving threats
• Develop metrics, scorecards, and executive reporting to measure cyber resilience and security effectiveness
• Work with business and technology partners to identify improvement opportunities and strengthen overall cyber resilience
• Contribute to the long-term roadmap, strategy, and maturity of the Cyber Resilience & Assurance program
• Understanding of threat actor tactics, techniques, and procedures (TTPs)
• Working knowledge of the MITRE ATT&CK Framework
• 3+ years of experience with modern attack methodologies

Your Qualifications:

• Experience helping build or mature Security Assurance, Cyber Resilience, Threat Emulation, Security Validation, Adversarial Validation, Red Team, or Purple Team capabilities
• Experience conducting security assessments, attack simulations, adversarial exercises, or threat-led testing activities
• Experience working within Financial Services, Wealth Management, Banking, Insurance, or other highly regulated industries
• Familiarity acting as a Red Team, or Purple Team member with cyber resilience exercises, security control validation, and operational readiness assessments
• Experience evaluating new technologies, including cloud and frontier AI security controls

Preferred Qualifications:

• Experience helping build or mature Security Assurance, Cyber Resilience, Threat Emulation, Security Validation, Adversarial Validation, with Red Team, or Purple Team capabilities.
• Experience as a Red Team, or Purple Team member that has conducted security assessments, attack simulations, adversarial exercises, or threat-led testing activities.
• Experience with cloud security testing or emerging technology security assessments.
• Experience working in Financial Services or other highly regulated environments.
• OSCP, OSEP, CRTP, or CRTE
• GPEN, GCIH, or GDAT
• CEH or PenTest+
• Cloud or security architecture certifications

Why Fisher Investments:

We work for a bigger purpose: bettering the investment universe. We take great pride in our inclusive culture, our learning and development framework customized for every employee, and our Great Place to Work Certification. It's the people that make the Fisher purpose possible, and we invest in them by offering exceptional benefits like:

• 100% paid medical, dental and vision premiums for you and your qualifying dependents
• A 50% 401(k) match, up to the IRS maximum
• 20 days of PTO, plus 10 paid holidays
• Family Support programs including 8 week Paid Primary Caregiver Leave, $10,000 fertility, family forming, and hormonal health assistance, and back-up child, adult, and elder care
• This is an in-office role. Based on your role, tenure, and performance eligibility you may have the opportunity to participate in our hybrid work from home program. This program is subject to change.

FISHER INVESTMENTS IS AN EQUAL OPPORTUNITY EMPLOYER