Senior Information Technology Program Manager

Virginia State Corporation Commission; Richmond (VA); Hybrid; USD 125,000 - 160,000; Full time

Job summary

The State Corporation Commission is seeking a Senior IT Program Manager to plan, coordinate, and oversee IT and cybersecurity programs across departments. This role will lead cross-functional teams, manage vendors and stakeholders, and deliver secure capabilities on time and within scope.

Hybrid work arrangement with opportunities for professional development and training. Strong leadership and communication skills required, along with a background in cybersecurity and IT project management.

Qualifications

• Bachelor's degree in Cybersecurity, IT, Information Systems, or related field.
• Significant experience leading cybersecurity/IT projects.
• Experience with vendor management.
• Knowledge of risk management and governance.
• Experience with Power BI and Excel reporting.
• DLP platforms knowledge.

Responsibilities

• Establish and oversee governance processes for cybersecurity initiatives and ensure alignment with priorities.
• Lead multiple concurrent cybersecurity projects with managed milestones.
• Manage relationships with vendors, MSSPs/MDR providers, and consulting partners.
• Serve as the primary point of contact for program decisions and strategic direction.
• Develop, manage, and maintain cybersecurity program plans supporting security objectives.
• Track program progress using KPIs and security metrics to drive improvement.
• Oversee procurement and implementation of cybersecurity technologies, tools, and services.
• Lead executive briefings and status updates on progress and challenges.
• Prepare communications and reports for internal/external audits.
• Identify and track cybersecurity risks, threats, and vulnerabilities.
• Assist in coordinating cybersecurity incident response and lessons learned.
• Validate risk mitigation and incident readiness with IT teams.
• Track and remediate audit findings and security exceptions.

Skills

Leadership

Cybersecurity knowledge

Risk management

Vendor management

Communication

Project management

Strategic planning

Stakeholder management

Data-driven decision making

Education

Bachelor's degree in Cybersecurity, Information Technology, Information Systems, or related field

Tools

Microsoft Purview DLP

Microsoft Power BI

Microsoft Excel

Job description

Anticipated Starting Salary Range: $125,000 - $160,000

Starting Salary Commensurate with Qualifications and Experience

The State Corporation Commission (SCC) is seeking a Senior IT Program Manager to join our Enterprise Technology Services Division. The Senior IT Program Manager will be responsible for planning, coordinating, and overseeing the execution of IT and cybersecurity programs, projects, and initiatives that protect the SCC's information assets and technology infrastructure. The Senior IT Program Manager will work across departments, including managing a cross-functional team, vendors, and stakeholders to deliver security capabilities on time, within scope, and on budget.

Essential Functions of the Senior IT Program Manager position includes the following:

• Establish and oversee governance processes for cybersecurity initiatives, ensuring alignment
• with enterprise priorities and compliance requirements.
• Lead multiple concurrent cybersecurity projects, ensuring dependencies are managed and milestones are met.
• Manage relationships with vendors, MSSPs/MDR providers, and consulting partners.
• Serve as the primary point of contact for program-related decisions and strategic direction.
• Develop, manage, and maintain cybersecurity program plans that adhere to relevant frameworks and regulations as well as support organizational security objectives and risk tolerance.
• Track program progress and measure success using key performance indicators (KPIs) and security metrics to drive continuous improvement.
• Oversee the procurement and implementation of cybersecurity technologies, tools, and services.
• Lead regular executive briefings and status updates on cybersecurity program progress, challenges, and achievements.
• Prepare communications and reports for internal and external stakeholders, including reports for internal and external audits.
• Identify and track cybersecurity risks, threats, and vulnerabilities across programs and projects.
• Assist in coordinating cybersecurity incident response activities and lessons learned.
• Partner with IT teams to validate risk mitigation strategies and incident response readiness.
• Track and remediate audit findings, security exceptions, and penetration test findings.
• Assist with maintaining risk register and work with IT and business units to close control gaps.
• Support the development and testing of business continuity and disaster recovery plans as they relate to cybersecurity.
• Perform related work as required.

This position offers a hybrid work schedule (some in-office and telework days each week) as well as a variety of professional development and training opportunities.

Preferred Qualifications

• Significant professional experience leading Cybersecurity projects and/or IT projects.
• Some experience with vendor management and managing a cross-functional team.
• Some experience in project management and strategic Cybersecurity/IT planning is beneficial.
• Some hands-on experience with DLP platforms such as Microsoft Purview DLP.
• Thorough knowledge of risk management, vulnerability management, and governance policies.
• Some experience with producing various reports and metrics in programs such as Microsoft Power BI and Microsoft Excel.
• Broad knowledge of enterprise IT domains such as infrastructure, applications, security, cloud computing, and data management.
• Bachelor's degree in Cybersecurity, Information Technology, Information System, or a related field.
• Strong leadership and performance management skills.
• Ability to manage, coach, develop, train, and evaluate staff.
• Ability to effectively manage IT and cybersecurity vendors.
• Ability to prepare documentation, reports, processes, and procedures.
• Ability to explain and present technical matters clearly and effectively in both a technical and non-technical manner.
• Strong communication skills including the ability to express and understand ideas clearly, both orally and in writing.
• Excellent attention to detail, interpersonal skills, research abilities, and critical thinking skills.
• Highly self-motivated and proven analytical, evaluative, and problem-solving abilities.
• Ability to establish and maintain effective working relationships with Commission staff, industry personnel, and the general public.