Security Project manager / Cybersecurity Program Manager

VOLTO Consulting; Marlborough (MA); On-site; USD 120,000 - 180,000; Full time

Job summary

VOLTO Consulting in Marlborough, MA seeks a Security Project Manager / Cybersecurity Program Manager to lead an enterprise security program and govern risk across applications, data, integrations, and vendor services.

The role demands translating technical findings into business risk, coordinating across IT, security, legal, and procurement, and delivering executive dashboards and remediation plans in a fast-paced environment.

Qualifications

• Candidate needs a blend of deep cybersecurity knowledge, risk management expertise, and strong program management capabilities.

Responsibilities

• Lead and operate an enterprise security program focused on the security posture of applications, technology platforms, data, integrations, tools, and third-party services.
• Build and maintain a risk-based view of the enterprise attack surface, including customer/member applications, team-member tools, SAP and enterprise platforms, infrastructure, data flows, APIs, SaaS products, AI-enabled capabilities, and vendor-managed services.
• Coordinate security assessments and assurance activities across Infrastructure, Cybersecurity, Penetration Testing, application teams, SAP/enterprise platforms, Data and AI, Architecture, Privacy, Legal, Compliance, Internal Audit, Procurement, and third parties.
• Ensure the appropriate specialists are engaged for each priority initiative or exposure, including architecture review, threat modeling, vulnerability assessment, penetration testing, data/privacy review, access review, application/API security review, and vendor due diligence.
• Translate technical findings into clear business risk statements, priorities, remediation plans, and executive decisions.
• Drive remediation of material security gaps by aligning accountable owners, milestones, funding needs, dependencies, and escalation paths.
• Develop and manage the program charter, integrated plan, timeline, governance model, and meeting cadence.
• Maintain an active RAID log risks, assumptions, issues, and dependencies and elevate material items promptly.
• Produce clear weekly program reporting and executive dashboards covering progress, security posture, assessment coverage, material risks, remediation status, decisions needed, and overall program health.
• Partner with technology and business leaders to prioritize security investments based on enterprise exposure, member/customer impact, business value, operational resilience, regulatory requirements, and risk tolerance.
• Build productive relationships with vendors and service providers; ensure technical, operational, and contractual security obligations are assessed and monitored.

Skills

Cybersecurity program management

Job description

Security Project manager / Cybersecurity Program Manager / Security Assurance Lead / Enterprise Security Risk & Governance Lead

Marlborough, MA 01752 - Onsite

Full-time

Job Description

Must Have Technical/Functional Skills

• Cybersecurity Program Manager / Security Assurance Lead / Enterprise Security Risk & Governance Lead. candidate needs a blend of deep cybersecurity knowledge, risk management expertise, and strong program management capabilities.

Roles & Responsibilities

Core Responsibilities

• Lead and operate an enterprise security program focused on the security posture of applications, technology platforms, data, integrations, tools, and third-party services.
• Build and maintain a risk-based view of the enterprise attack surface, including customer/member applications, team-member tools, SAP and enterprise platforms, infrastructure, data flows, APIs, SaaS products, AI-enabled capabilities, and vendor-managed services.
• Coordinate security assessments and assurance activities across Infrastructure, Cybersecurity, Penetration Testing, application teams, SAP/enterprise platforms, Data and AI, Architecture, Privacy, Legal, Compliance, Internal Audit, Procurement, and third parties.
• Ensure the appropriate specialists are engaged for each priority initiative or exposure, including architecture review, threat modeling, vulnerability assessment, penetration testing, data/privacy review, access review, application/API security review, and vendor due diligence.
• Translate technical findings into clear business risk statements, priorities, remediation plans, and executive decisions.
• Drive remediation of material security gaps by aligning accountable owners, milestones, funding needs, dependencies, and escalation paths.
• Develop and manage the program charter, integrated plan, timeline, governance model, and meeting cadence.
• Maintain an active RAID log risks, assumptions, issues, and dependencies and elevate material items promptly.
• Produce clear weekly program reporting and executive dashboards covering progress, security posture, assessment coverage, material risks, remediation status, decisions needed, and overall program health.
• Partner with technology and business leaders to prioritize security investments based on enterprise exposure, member/customer impact, business value, operational resilience, regulatory requirements, and risk tolerance.
• Build productive relationships with vendors and service providers; ensure technical, operational, and contractual security obligations are assessed and monitored.