InfoSec Program Lead: Regulatory & Risk Expert

Harris Computer; Oklahoma City (OK); On-site; USD 105,000 - 120,000; Full time

Job summary

Harris Computer is seeking an experienced information security leader to guide client security programs, advise executives on strategy, and ensure compliance across frameworks such as NIST, ISO 27001, HIPAA, SOC 2, and PCI DSS. The role involves coordinating risk assessments, audits, and incident response while aligning security controls with business needs.

The position requires deep expertise in information security governance, risk management, and cross-functional collaboration to deliver

Qualifications

• At least five years of information security leadership experience (CISO, vCISO, or senior security leader).
• At least three years in security operations, security engineering, vulnerability management, or sysadmin roles.
• Consulting/managed services experience across multiple regulated clients (healthcare, financial, government).
• Three+ years implementing/operating controls for NIST/ISO HIPAA SOC2 PCI DSS, etc.

Responsibilities

• Lead security program leadership and operations to meet business, regulatory, and industry requirements.
• Advise executives on information security strategy, policies, and procedures.
• Maintain security policies, testing and monitoring across client environments.
• Oversee risk assessments, audits, and regulatory compliance activities.
• Coordinate incident detection, response, and remediation within SLAs.
• Develop disaster recovery and business continuity testing plans.

Skills

Security leadership

Security operations

Regulatory compliance

Education

Bachelor's degree in CS/IS or related

Job description

Harris Computer is seeking an experienced information security leader to guide client security programs, advise executives on strategy, and ensure compliance across frameworks such as NIST, ISO 27001, HIPAA, SOC 2, and PCI DSS. The role involves coordinating risk assessments, audits, and incident response while aligning security controls with business needs.

The position requires deep expertise in information security governance, risk management, and cross-functional collaboration to deliver