Strategic InfoSec Program Lead (CMMC/NIST)

Mainstay Technologies, Inc.; Boston (MA); Remote; USD 130,000 - 180,000; Full time

Benefits offered by this job

Health, Dental, Vision Insurance

401(k) with company match

Paid time off

Job summary

Mainstay Technologies, Inc. is seeking an Information Security Program Manager to act as the strategic security advisor and governance lead for assigned clients.

The role focuses on maturing client information security programs with emphasis on CMMC readiness, NIST alignment, risk management, policy development, and assessment preparation. You will collaborate with clients, technical teams, security operations, external assessors, and executives to ensure security programs align with business

Qualifications

• Experience supporting CMMC readiness initiatives.
• Experience assisting clients through audits or certification assessments.
• Experience in consulting or managed services environments.
• Experience presenting to executive leadership teams.

Responsibilities

• Lead client governance meetings and security program reviews.
• Develop and manage client security roadmaps and strategic initiatives.
• Provide security guidance to executive leadership and key stakeholders.
• Track program goals, projects, milestones, and security initiatives.
• Coordinate activities between clients, technical teams, security operations, and third-party partners.
• Present security posture, compliance status, risks, and recommendations to client leadership.
• Drive continuous improvement of client security programs.

Skills

CMMC readiness

NIST compliance

Risk management

Governance

Policy development

Executive communication

Job description

Mainstay Technologies, Inc. is seeking an Information Security Program Manager to act as the strategic security advisor and governance lead for assigned clients.

The role focuses on maturing client information security programs with emphasis on CMMC readiness, NIST alignment, risk management, policy development, and assessment preparation. You will collaborate with clients, technical teams, security operations, external assessors, and executives to ensure security programs align with business