VP, InfoSec Program Delivery & Strategy

Jefferies & Company, Inc.; Jersey City (NJ); On-site; USD 185,000 - 200,000; Full time

Benefits offered by this job

Annual discretionary incentive

Retention bonus

Medical, dental & vision coverage

401(k)

Paid time off

Parental leave

Job summary

Jefferies is seeking a VP of Information Security Program Management in Jersey City, NJ, to lead the health, governance, and execution of the Information Security portfolio. This executive role demands a strong presence, decisive execution, and the ability to challenge weak plans and surface risks before they affect delivery.

You will own the integrated delivery portfolio, build dashboards and executive reporting, drive the annual investment cycle, and lead a team of PMs and BAs across a global,

Qualifications

• 8+ years of program management experience within Information Security, Cybersecurity, Technology Risk, or Enterprise Technology.
• Demonstrated experience building or leading a PMO or portfolio governance function — not just managing individual programs.
• Experience leading large-scale transformation, integration, or organizational change programs in complex, matrixed environments.
• Strong working knowledge of vendor risk management, security governance, identity and access management, and technology risk.
• Proven experience leading and developing teams of Project Managers and Business Analysts — setting standards, building capability, and managing performance.
• Track record of leading annual investment planning cycles from demand intake through budget submission and approval.
• Experience partnering with senior technology and business leadership and navigating cross-functional dependencies at scale.
• Experience delivering in a global, distributed operating model including coordination with offshore or GCC-based teams.
• Financial services experience strongly preferred; familiarity with regulatory environments, governance standards, and audit readiness is essential.
• Familiarity with AI-assisted PM tooling, portfolio dashboards, and reporting automation preferred.
• PMP certification required or actively in progress; PRINCE2, SAFe, or Agile equivalent a plus.
• CISSP, CISM, or CRISC certification a plus.

Responsibilities

• Own the integrated Information Security delivery portfolio, maintaining a unified, real-time view of all programs and projects including status, milestones, dependencies, risks, decisions, and resource utilization.
• Build and maintain standardized dashboards, scorecards, and executive reporting that are readily accessible to leadership and key stakeholders.
• Track and monitor portfolio health; ensure risks and issues are escalated with sufficient lead time for leadership action.
• Own the CISO portfolio reporting and escalations process — ensuring the right information reaches the right audience at the right cadence.
• Drive accountability across stakeholders; ensure actions, decisions, and commitments are tracked transparently and closed on time.
• Establish a communications plan for delivery reporting, defining report types, audiences, and cadences that support efficient delivery without unnecessary overhead.
• Coordinate security-related initiatives across the portfolio including identity and access management, SSO, PAM, segregation of duties, security operations, network security, physical security, application onboarding, and regulatory readiness.
• Define, implement, and continuously improve the Information Security program management operating model — establishing the frameworks, templates, tools, and governance routines the function operates on.
• Collaborate with IT organizations across the firm to identify and adopt best practices; ensure Information Security delivery standards are aligned with broader technology organization norms.
• Establish and lead recurring governance forums with the CISO leadership team where portfolio health, risks, and priorities are reviewed.
• Serve as a neutral point of alignment, ensuring objectivity and balance across delivery areas.
• Lead and develop a team of Project Managers and Business Analysts embedded across the Information Security portfolio with influence rather than authority.
• Set clear performance expectations; hold team members accountable to delivery quality, stakeholder engagement, and professional conduct.
• Model a 'trust but verify' mindset — coaching PMs to validate status through evidence and data rather than accepting optimistic self-reporting.
• Lead the annual Information Security investment planning cycle end-to-end, from demand intake and business case development through prioritization, budget submission, and approval.
• Maintain alignment between strategic priorities and funded initiatives throughout the year, surfacing gaps, over-allocations, and trade-off decisions to leadership in real time.
• Partner with Finance and the Cybersecurity COO to track actuals vs. plan; produce variance analysis and reforecast submissions as required.
• Own benefits realization tracking for all approved investments, ensuring outcomes committed to in business cases are measured, reported, and achieved.
• Partner closely with global technology teams to align Information Security delivery with firm-wide technology programs, shared platforms, and enterprise architecture decisions.
• Identify and manage cross-program dependencies between Information Security initiatives and broader technology portfolio commitments.
• Represent Information Security delivery in firm-wide program governance forums; ensure cybersecurity priorities are visible and protected within the broader investment landscape.
• Identify process inefficiencies and control gaps within delivery and governance; recommend and implement targeted improvements that enhance visibility, predictability, and execution speed.
• Facilitate lessons-learned reviews across programs and integrate findings into governance standards and delivery frameworks.
• Champion automation of portfolio management processes using available tooling, reducing manual reporting overhead and improving data quality and timeliness.

Skills

Program management

PMO leadership

Team development

Portfolio reporting

Executive stakeholder management

Education

PMP certification

PRINCE2/SAFe/Agile

Tools

AI-assisted PM tooling

Portfolio dashboards

Reporting automation

Job description

Jefferies is seeking a VP of Information Security Program Management in Jersey City, NJ, to lead the health, governance, and execution of the Information Security portfolio. This executive role demands a strong presence, decisive execution, and the ability to challenge weak plans and surface risks before they affect delivery.

You will own the integrated delivery portfolio, build dashboards and executive reporting, drive the annual investment cycle, and lead a team of PMs and BAs across a global,