Security Project manager

Volto Consulting; Marlborough (MA); In loco; USD 140.000 - 190.000; Tempo pieno

Descrizione del lavoro

VOLTO Consulting seeks an experienced cybersecurity program leader in Marlborough, MA. The role focuses on governing security across applications, data, and platforms, coordinating with IT, privacy, and vendors to reduce risk.

You will drive threat modeling, assessments, and remediation, turning complex findings into actionable business decisions and program-level dashboards for executives.

Competenze

• Experience leading enterprise security programs and risk-focused initiatives.
• Ability to translate technical findings into business risk and remediation plans.
• Strong collaboration with cross-functional teams and vendors.

Mansioni

• Lead an enterprise security program focused on apps, platforms, data, integrations and third-party services.
• Develop and maintain a risk-based view of the enterprise attack surface.
• Coordinate security assessments across Infrastructure, Cybersecurity, App teams, Data & AI, and Legal.
• Ensure engagement of appropriate specialists for reviews (threat modeling, vulnerability, pen tests).
• Translate findings into clear business risk statements and remediation plans.
• Drive remediation with owners, milestones, funding, and escalation paths.
• Produce weekly reports and executive dashboards on progress and risk.
• Prioritize security investments based on exposure, business value, and regulatory needs.
• Build relationships with vendors to monitor security obligations.

Conoscenze

Cybersecurity

Program management

Risk management

Security governance

Descrizione del lavoro

Marlborough, MA

Fulltime - Need only independent VISA Holders

Job Description

Must Have Technical/Functional Skills

• Cybersecurity Program Manager / Security Assurance Lead / Enterprise Security Risk & Governance Lead. candidate needs a blend of deep cybersecurity knowledge, risk management expertise, and strong program management capabilities.

Roles & Responsibilities

Core Responsibilities

• Lead and operate an enterprise security program focused on the security posture of applications, technology platforms, data, integrations, tools, and third-party services.
• Build and maintain a risk-based view of the enterprise attack surface, including customer/member applications, team-member tools, SAP and enterprise platforms, infrastructure, data flows, APIs, SaaS products, AI-enabled capabilities, and vendor-managed services.
• Coordinate security assessments and assurance activities across Infrastructure, Cybersecurity, Penetration Testing, application teams, SAP/enterprise platforms, Data and AI, Architecture, Privacy, Legal, Compliance, Internal Audit, Procurement, and third parties.
• Ensure the appropriate specialists are engaged for each priority initiative or exposure, including architecture review, threat modeling, vulnerability assessment, penetration testing, data/privacy review, access review, application/API security review, and vendor due diligence.
• Translate technical findings into clear business risk statements, priorities, remediation plans, and executive decisions.
• Drive remediation of material security gaps by aligning accountable owners, milestones, funding needs, dependencies, and escalation paths.
• Develop and manage the program charter, integrated plan, timeline, governance model, and meeting cadence.
• Maintain an active RAID log risks, assumptions, issues, and dependencies and escal...
• Produce clear weekly program reporting and executive dashboards covering progress, security posture, assessment coverage, material risks, remediation status, decisions needed, and overall program health.
• Partner with technology and business leaders to prioritize security investments based on enterprise exposure, member/customer impact, business value, operational resilience, regulatory requirements, and risk tolerance.
• Build productive relationships with vendors and service providers; ensure technical, operational, and contractual security obligations are assessed and monitored.