Security Program Manager
Description
The Information Security Program Manager (Program Manager) is responsible for the successful completion of the Tyler State and Federal Group’s (SFG) security program. This is an individual contributor role that requires strong project and/or program management capabilities that include the ability to accomplish tasks through other teams, understand risk, communicate effectively, and deliver quality documentation.
Candidates with must display experience with regulatory and compliance frameworks such as HIPAA, NIST SP 800-53, and PCI DSS. Candidates must demonstrate knowledge of risk management, application security, security training, and project management. Candidates must have at least 5 years of experience working in information technology, compliance or security, strive to align daily work with Enterprise IT objectives, and display creativity and tenacity when solving problems.
The SFG Security Program involves working with teams across the Group to promote Group and Corporate Security objectives, to comply with regulations and obligations, to add security improvements to annual plans, to educate them about security policy changes and requirements, and to foster a culture of security awareness.
Responsibilities:
- Update SFG policies and standards as needed
- Document the SFG security plan
- Engage and coordinate activities with Tyler Corporate Security staff
- Provide security plan status to SFG management
- Collaborate with Tyler Corporate Security on company security objectives and initiatives
- Arrange and promote security awareness training as needed
- Identify areas of improvement for security across the SFG
- Establish and collect security metrics that support SFT and Tyler Corporate Security objectives
Qualifications:
- 5 years of experience working in information technology, compliance or security
- Proven communication expertise with an ability to influence both horizontally and vertically
- Ability to effectively communicate status, issues, and recommendations to management
- Ability to provide guidance on and understand concepts, practices, and procedures associated with NIST SP 800-53, NIST CSF, HIPAA, and PCI DSS
- Significant experience delivering quality documentation
- Shares knowledge with SFG personnel
- Ability to manage a team project through completion
- Fundamental understanding of audit procedures
- Strong interpersonal skills, relationship-building, and ability to work in a collaborative environment with various cross-functional teams