InfoSec Program Manager: Enterprise Cybersecurity Lead

Columbia University Irving Medical Center; New York (NY); On-site; USD 120,000 - 145,000; Full time

Job summary

Columbia University Irving Medical Center is seeking an Information Security Program Manager to lead a portfolio of enterprise cybersecurity programs and strategic initiatives. You will report to the CISO and drive planning, governance, and execution to strengthen security posture across a regulated healthcare environment.

The ideal candidate brings strong cybersecurity program management, leadership, and communication skills, with experience coordinating large cross-functional security

Qualifications

• Bachelor’s degree or equivalent with five years of related experience.
• Five years of related experience in cybersecurity program management.
• Experience leading large cross-functional cybersecurity initiatives from planning through implementation.
• Certifications such as PMP, CISSP, CISM, CRISC preferred.
• Healthcare, higher education, or regulated industries experience.
• Strong governance, risk management, and compliance knowledge.
• Experience implementing or managing enterprise cybersecurity technologies.
• Experience supporting risk assessments, security audits, and regulatory initiatives.
• Knowledge of NIST CSF, NIST 800-53, NIST 800-171, HITRUST, HIPAA/HITECH, ISO 27001, CIS Controls.

Responsibilities

• Coordinate planning, execution, governance, and delivery of enterprise cybersecurity programs.
• Engage with the CISO to develop and execute the cybersecurity roadmap.
• Drive governance, reporting, metrics, and dashboards for program health and milestones.
• Coordinate cross‑functional teams across CUIMC.
• Manage scope, budgets, schedules, resources, risks, and communications.
• Participate in cybersecurity governance activities and executive briefings.
• Ensure initiatives comply with policies and regulatory frameworks.
• Develop and maintain program documentation and executive presentations.
• Collaborate with leaders to prioritize cybersecurity investments by risk.
• Identify opportunities to improve processes and program maturity.
• Represent information security in major enterprise transformations.

Skills

Cybersecurity portfolio management

Stakeholder management

Executive communication

Governance & risk management

Agile/Waterfall delivery

Education

Bachelor’s degree or equivalent

Five years related experience

Job description

Columbia University Irving Medical Center is seeking an Information Security Program Manager to lead a portfolio of enterprise cybersecurity programs and strategic initiatives. You will report to the CISO and drive planning, governance, and execution to strengthen security posture across a regulated healthcare environment.

The ideal candidate brings strong cybersecurity program management, leadership, and communication skills, with experience coordinating large cross-functional security