Strategic Cybersecurity Transformation Lead

Carex Consulting Group; Madison (WI); On-site; USD 125,000 - 170,000; Full time

Job summary

Carex Consulting Group is seeking a Cybersecurity Program Manager to transform assessment findings into an executable, governed program. You will lead a multi-workstream transformation aligned with federal healthcare requirements.

You will build roadmaps, governance, and reporting to executives, manage dependencies, and coordinate across cyber resilience functions, audits, and compliance efforts. The role aims to mature security and prepare handoff to an internal PMO.

Qualifications

• Minimum of 8 years of program or project management experience, including at least 5 years in cybersecurity programs.

Responsibilities

• Own program management for the cybersecurity transformation portfolio, including planning, sequencing, dependency management, milestone tracking, and critical path management.
• Build and maintain a multi-year cybersecurity transformation roadmap, integrated program plan, and RAID log.
• Convert identified cybersecurity assessment gaps into a prioritized remediation register.
• Normalize and validate security gaps with named owners and map remediation activities to NIST CSF, NIST SP 800-53, and Section 912 controls.
• Design and operate a cybersecurity metrics and reporting framework showing maturity and risk reduction.
• Produce executive and board-grade transformation reporting materials.
• Establish lightweight program governance with forums, agendas, and decision capture.
• Coordinate transformation activities across Enterprise Cyber Resilience functions.
• Align roadmap with annual Section 912 audit cycle for efficient planning and execution.
• Build a capacity model to support evidence-based staffing and budget decisions.
• Create a sustainable governance model with clear ownership and decision rights.
• Develop a wave-sequenced, multi-year plan reflecting priorities and constraints.
• Ensure metrics and reporting use live data across cycles.
• Return capacity to Enterprise Security leadership by driving program operations and follow-through.

Skills

Program management

Cybersecurity governance

NIST CSF

FISMA/HIPAA

Audits & reporting

Job description

Carex Consulting Group is seeking a Cybersecurity Program Manager to transform assessment findings into an executable, governed program. You will lead a multi-workstream transformation aligned with federal healthcare requirements.

You will build roadmaps, governance, and reporting to executives, manage dependencies, and coordinate across cyber resilience functions, audits, and compliance efforts. The role aims to mature security and prepare handoff to an internal PMO.