Job Description
Insight Global is seeking a Program Manager to join one of their Investment Banking clients in New York City. The individual will oversee leading security-focused programs — driving planning, execution, and delivery of initiatives that protect the firm's technology environment, data, and clients. The ideal candidate has hands-on experience managing Information Security programs in a regulated, enterprise environment. This is a hybrid role requiring 3 days onsite in NYC.
Key Responsibilities:
- Lead end-to-end program management for Information Security initiatives (e.g., identity & access management, threat detection & response, vulnerability management, cloud security, third-party risk)
- Partner with the CISO organization and Technology leadership to define program scope, roadmaps, and success metrics
- Build and maintain integrated program plans, budgets, and dependency maps across concurrent security workstreams
- Identify, track, and mitigate program risks; elevate proactively with clear recommendations
- Run governance routines (steering committees, status reporting) to keep executive stakeholders aligned
- Manage vendor and managed security service provider relationships supporting program delivery
- Ensure programs align with relevant regulatory/compliance requirements (SEC, FINRA, NIST CSF, ISO 27001) and support audit readiness
- Translate technical security concepts into business risk language for senior leadership reporting
Nice to Have Skills & Experience
- Strong knowledge of security frameworks (NIST CSF, ISO 27001, CIS Controls) and financial services regulatory requirements
- Experience in investment banking or another regulated financial services environment CISSP, CISM, or CRISC certification
- Experience with third-party/vendor security risk assessments
- Background supporting regulatory exams or audits related to information security
- PMP, PgMP, or equivalent certification
- 5+ years of program management experience
- Financial services experience
- Experience delivering large-scale programs in a complex enterprise environment
- Proven ability to manage senior stakeholders and communicate across technical and executive audiences