InfoSec Program Manager

Insight Global; New York (NY); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Insight Global is seeking a Program Manager in New York City to lead security-focused initiatives that protect the firm's technology, data, and clients. Hybrid role requiring 3 days onsite in NYC, overseeing planning, execution, and delivery across multiple security workstreams.

The ideal candidate has 8+ years in program management with 4+ years in Information Security or IT Risk, deep knowledge of NIST CSF/ISO 27001, and PMP/PgMP certifications, with proven executive communication.

Qualifications

• 8+ years of program/project management experience, including 4+ years in Information Security or IT Risk.
• Delivery of large-scale security programs in a complex enterprise environment.
• Knowledge of security frameworks (NIST CSF, ISO 27001, CIS Controls) and financial services regulation.
• Proven ability to manage senior stakeholders and communicate across technical and executive audiences.
• PMP, PgMP, or equivalent certification.

Responsibilities

• Lead end-to-end program management for Information Security initiatives across multiple workstreams.
• Partner with CISO and Technology leadership to define scope, roadmaps and success metrics.
• Develop integrated plans, budgets, and dependency maps; track risks and escalations.
• Govern governance routines and reporting to keep executives aligned.
• Manage vendor and MSSP relationships supporting program delivery.
• Ensure alignment with regulatory/compliance requirements (SEC, FINRA, NIST CSF, ISO 27001) and audit readiness.

Skills

Program management

Security program mgmt

Stakeholder management

Risk management

Executive communication

Tools

PMP

PgMP

CISSP

CISM

CRISC

Job description

Insight Global is seeking a Program Manager to join one of their Investment Banking clients in New York City. The individual will oversee leading security-focused programs — driving planning, execution, and delivery of initiatives that protect the firm's technology environment, data, and clients. The ideal candidate has hands‑on experience managing Information Security programs in a regulated, enterprise environment. This is a hybrid role requiring 3 days onsite in NYC.

Key Responsibilities

• Lead end-to-end program management for Information Security initiatives (e.g., identity & access management, threat detection & response, vulnerability management, cloud security, third-party risk)
• Partner with the CISO organization and Technology leadership to define program scope, roadmaps, and success metrics
• Build and maintain integrated program plans, budgets, and dependency maps across concurrent security workstreams
• Identify, track, and mitigate program risks; escalator proactively with clear recommendations
• Run governance routines (steering committees, status reporting) to keep executive stakeholders aligned
• Manage vendor and managed security service provider relationships supporting program delivery
• Ensure programs align with relevant regulatory/compliance requirements (SEC, FINRA, NIST CSF, ISO 27001) and support audit readiness
• Translate technical security concepts into business risk language for senior leadership reporting

Required Qualifications

• 8+ years of program/project management experience, including 4+ years managing Information Security or IT Risk programs
• Experience delivering large-scale security programs in a complex enterprise environment
• Strong knowledge of security frameworks (NIST CSF, ISO 27001, CIS Controls) and financial services regulatory requirements
• Proven ability to manage senior stakeholders and communicate across technical and executive audiences
• PMP, PgMP, or equivalent certification

Preferred Qualifications

• Experience in investment banking or another regulated financial services environment
• CISSP, CISM, or CRISC certification
• Experience with third-party/vendor security risk assessments
• Background supporting regulatory exams or audits related to information security