VP, Program Manager – Global Information Security

Jefferies; Hoboken (NJ); On-site; USD 185,000 - 200,000; Full time

Job summary

Jefferies seeks a senior leader to own the Information Security program portfolio, driving health, governance, and execution in a fast-moving environment. This VP-level role sits in the Cybersecurity COO organization with dual accountability for day-to-day delivery and maturing the program management operating model.

The role leads a transformation, including a Global Capability Center build, vendor optimization, and stand-up of Data Security and AI Security capabilities.

Qualifications

• 8 years of program management experience within Information Security, Cybersecurity, Technology Risk, or Enterprise Technology.
• Experience building or leading a PMO or portfolio governance function, not just managing individual programs.
• Experience leading large-scale transformation, integration, or organizational change programs in complex, matrixed environments.
• Strong knowledge of vendor risk management, security governance, identity and access management, and technology risk.
• Proven experience leading and developing teams of Project Managers and Business Analysts and managing performance.
• Track record of leading annual investment planning cycles from demand intake through budget submission and approval.
• Experience partnering with senior technology and business leadership and navigating cross-functional dependencies at scale.
• Familiarity with AI-assisted PM tooling, portfolio dashboards, and reporting automation is a plus.

Responsibilities

• Own the integrated Information Security delivery portfolio with real-time status and resource view.
• Build standardized dashboards, scorecards, and executive reporting for leadership.
• Monitor portfolio health and escalate risks with lead time for action.
• Own CISO portfolio reporting and escalation processes for appropriate cadence.
• Drive accountability across stakeholders; ensure actions and commitments are tracked and closed.
• Define and implement a communications plan for delivery reporting and cadence.
• Coordinate security initiatives across the portfolio including IAM, SSO, PAM, and regulatory readiness.
• Define, implement, and improve the PMO operating model with frameworks, templates, tools, and governance.
• Collaborate with IT to align security delivery with broader technology norms.
• Lead governance forums with the CISO leadership team; review portfolio health and priorities.
• Lead and develop a team of PMs and BAs with influence, not authority.
• Set performance expectations and coach teams on status validation with evidence.
• Lead annual information security investment planning from demand to approval.
• Maintain alignment between strategic priorities and funded initiatives; surface gaps and trade-offs.
• Track actuals vs plan with Finance and Cybersecurity COO; produce variance analyses.
• Own benefits realization tracking for investments and ensure outcomes are measured.
• Partner with global tech teams to align delivery with firm-wide programs and architecture.
• Identify cross-program dependencies and protect cybersecurity priorities in governance forums.
• Identify process inefficiencies and drive improvements for visibility and speed.
• Facilitate lessons-learned and integrate findings into governance standards.
• Champion automation of portfolio management processes and improve data quality.

Job description

Job Description

The VP of Information Security Program Management is a senior delivery leader responsible for the health, governance, and execution of the Information Security program portfolio. This is not a traditional project coordination role - we are looking for a highly assertive program executive with strong presence who can operate effectively in a complex, fast-moving environment. The right candidate drives execution, challenges weak plans, surfaces uncomfortable truths early, and ensures risks and issues are addressed before they impact delivery.

The role sits within the Cybersecurity COO organization and carries dual accountability: owning the day-to-day delivery of the Information Security portfolio while simultaneously building and maturing the program management operating model that the function runs on. This leader will inherit a function in active transformation - navigating an organizational redesign, a Global Capability Center build, a vendor optimization program, and the stand-up of Data Security and AI Security capabilities.

Responsibilities

• Own the integrated Information Security delivery portfolio, maintaining a unified, real-time view of all programs and projects including status, milestones, dependencies, risks, decisions, and resource utilization.
• Build and maintain standardized dashboards, scorecards, and executive reporting that are readily accessible to leadership and key stakeholders.
• Track and monitor portfolio health; ensure risks and issues are escalated with sufficient lead time for leadership action.
• Own the CISO portfolio reporting and escalations process - ensuring the right information reaches the right audience at the right cadence.
• Drive accountability across stakeholders; ensure actions, decisions, and commitments are tracked transparently and closed on time.
• Establish a communications plan for delivery reporting, defining report types, audiences, and cadences that support efficient delivery without unnecessary overhead.
• Coordinate security-related initiatives across the portfolio including identity and access management, SSO, PAM, segregation of duties, security operations, network security, physical security, application onboarding, and regulatory readiness.
• Define, implement, and continuously improve the Information Security program management operating model - establishing the frameworks, templates, tools, and governance routines the function operates on.
• Collaborate with IT organizations across the firm to identify and adopt best practices; ensure Information Security delivery standards are aligned with broader technology organization norms.
• Establish and lead recurring governance forums with the CISO leadership team where portfolio health, risks, and priorities are reviewed.
• Serve as a neutral point of alignment, ensuring objectivity and balance across delivery areas.
• Lead and develop a team of Project Managers and Business Analysts embedded across the Information Security portfolio with influence rather than authority.
• Set clear performance expectations; hold team members accountable to delivery quality, stakeholder engagement, and professional conduct.
• Model a 'trust but verify' mindset - coaching PMs to validate status through evidence and data rather than accepting optimistic self-reporting.
• Lead the annual Information Security investment planning cycle end-to-end, from demand intake and business case development through prioritization, budget submission, and approval.
• Maintain alignment between strategic priorities and funded initiatives throughout the year, surfacing gaps, over-allocations, and trade-off decisions to leadership in real time.
• Partner with Finance and the Cybersecurity COO to track actuals vs. plan; produce variance analysis and reforecast submissions as required.
• Own benefits realization tracking for all approved investments, ensuring outcomes committed to in business cases are measured, reported, and achieved.
• Partner closely with global technology teams to align Information Security delivery with firm-wide technology programs, shared platforms, and enterprise architecture decisions.
• Identify and manage cross-program dependencies between Information Security initiatives and broader technology portfolio commitments.
• Represent Information Security delivery in firm-wide program governance forums; ensure cybersecurity priorities are visible and protected within the broader investment landscape.
• Identify process inefficiencies and control gaps within delivery and governance; recommend and implement targeted improvements that enhance visibility, predictability, and execution speed.
• Facilitate lessons-learned reviews across programs and integrate findings into governance standards and delivery frameworks.
• Champion automation of portfolio management processes using available tooling, reducing manual reporting overhead and improving data quality and timeliness.

Qualifications

• 8 years of program management experience within Information Security, Cybersecurity, Technology Risk, or Enterprise Technology.
• Demonstrated experience building or leading a PMO or portfolio governance function - not just managing individual programs.
• Experience leading large-scale transformation, integration, or organizational change programs in complex, matrixed environments.
• Strong working knowledge of vendor risk management, security governance, identity and access management, and technology risk.
• Proven experience leading and developing teams of Project Managers and Business Analysts - setting standards, building capability, and managing performance.
• Track record of leading annual investment planning cycles from demand intake through budget submission and approval.
• Experience partnering with senior technology and business leadership and navigating cross-functional dependencies at scale.
• Experience delivering in a global, distributed operating model including coordination with offshore C-based teams.
• Financial services experience strongly preferred; familiarity with regulatory environments, governance standards, and audit readiness is essential.
• Familiarity with AI-assisted PM tooling, portfolio dashboards, and reporting automation preferred.
• PMP certification required or actively in progress; PRINCE2, SAFe, or Agile equivalent a plus.
• CISSP, CISM, or CRISC certification a plus.

Primary Location Full Time Salary Range of $185,000 - $200,000.

LI-JR1

About Us

Jefferies is a leading global, full-service investment banking and capital markets firm that provides advisory, sales and trading, research, and wealth and asset management services. With more than 40 offices around the world, we offer insights and expertise to investors, companies, and governments.

At Jefferies, we are committed to building a culture that provides opportunities for all employees regardless of our differences and supports a workforce that is reflective of the communities where we work and live. As a result, we are able to pool our collective insights and intelligence to provide fresh and innovative thinking for our clients.

Jefferies is committed to creating and sustaining a workforce that welcomes individuals from all backgrounds to apply. Our employment decisions are made without regard to race, creed, color, national origin, ancestry, religion, pregnancy, age, medical condition, physical or mental disability, marital status, domestic partner status, sex, sexual orientation, gender, gender identity or expression, veteran or military status, genetic information, reproductive health decisions, or any other factor protected by applicable law. We are committed to hiring the most qualified applicants and complying with all federal, state, and local equal employment opportunity laws. As part of this commitment, Jefferies will extend reasonable accommodation to individuals with disabilities, as required by applicable law.

The salary offered will take into consideration an individual's experience level and qualifications. In addition to salary, Jefferies Financial Group is proud to offer a comprehensive benefits package to eligible, full-time employees or part-time employees, who are scheduled to work at least 30 hours or more per week, including an annual discretionary incentive and retention bonus, competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Jefferies also offers paid time off packages that include planned time off (e.g., vacation), unplanned time off (e.g., sick leave), and paid holidays, and for full-time employees, paid parental leave.