Cybersecurity & Infrastructure Program Manager

Job Summary

The Cybersecurity & Infrastructure Program Manager leads strategic cybersecurity and infrastructure programs from initiation through implementation and transition to operations. The role reports to the VP, Chief Information Security Officer and is assigned across initiatives led by the CISO and designated cybersecurity and infrastructure leaders as organizational priorities evolve.

This role converts strategic objectives into executable program and project plans, establishes practical governance, and drives delivery across complex, cross-functional environments. The Program Manager is accountable for maintaining clear schedules, milestones, dependencies, decisions, risks, issues, and executive updates so that teams remain aligned and leaders can act before delivery is affected.

The initial priorities are the ISO 27001 certification program and Public Key Infrastructure (PKI) modernization. The role will subsequently lead additional cybersecurity, infrastructure, resilience, compliance, identity, and technology modernization initiatives. The Program Manager is expected to drive outcomes, not simply collect status or maintain task lists.

Responsibilities for Employment

Program and Project Leadership

• Leads cybersecurity and infrastructure programs from charter through planning, execution, cutover, stabilization, transition to operations, and formal closeout.
• Translates strategic objectives into clear scope, measurable outcomes, workstreams, deliverables, milestones, resource needs, and accountable owners.
• Develops project charters, governance models, stakeholder maps, communication plans, integrated schedules, implementation plans, and closure criteria.
• Selects and applies waterfall, agile, or hybrid delivery methods based on the needs, risk, complexity, and maturity of each initiative.
• Creates a disciplined operating cadence that enables decisions, maintains momentum, and keeps teams focused on committed outcomes.
• Leads multiple related projects or workstreams while preserving clarity on priorities, sequencing, capacity, and cross-program dependencies.

Schedule, Delivery, and Accountability

• Builds, maintains, and actively manages detailed integrated schedules, including critical path, milestone dates, dependencies, resource constraints, and decision points.
• Validates progress against objective evidence and agreed completion criteria rather than relying only on reported percentage complete.
• Drives owners to meet commitments, surfaces slippage early, facilitates recovery plans, and escalates blockers or decisions when leadership intervention is required.
• Maintains accurate, concise, and decision-oriented status reporting for project teams, sponsors, steering committees, and executive stakeholders.
• Coordinates implementation and cutover planning, readiness reviews, go or no-go decisions, contingency planning, stabilization, and transition to operational support.
• Maintains action, decision, dependency, risk, and issue visibility. 
• Facilitates ownership and mitigation, recognizing that technical and business leaders remain accountable for risks and decisions within their areas.

Governance and Stakeholder Leadership

• Establishes and leads project governance meetings, working sessions, steering committees, and executive reviews with clear objectives, decisions, owners, and next steps.
• Coordinates delivery across cybersecurity, infrastructure, architecture, application, product security, compliance, quality, legal, procurement, finance, business, and other functions as required.
• Creates transparency across scope, schedule, cost, resources, dependencies, risks, issues, decisions, and delivery readiness.
• Builds trusted relationships with technical leaders and subject matter experts while maintaining accountability for delivery discipline and program outcomes.
• Communicates complex technology initiatives in clear business language without needing to serve as the technical architect, engineer, or product owner.

Vendor, Financial, and Resource Coordination

• Coordinates third-party service providers, technology vendors, implementation partners, consultants, auditors, and other external contributors.
• Aligns vendor plans and deliverables with the integrated schedule, acceptance criteria, contractual commitments, internal dependencies, and quality expectations.
• Supports project estimates, forecasts, purchase and contract activities, financial tracking, and escalation of forecast or funding variances.
• Identifies resource constraints and competing priorities, facilitates resolution with functional leaders, and reflect agreed capacity in the delivery plan.

Initial Priority Programs

• Leads the ISO 27001 certification program, including the integrated certification plan, governance cadence, internal audit coordination, evidence collection and readiness, external auditor coordination, remediation tracking, stakeholder engagement, and certification milestones.
• Leads the PKI modernization program, including chartering, planning, vendor coordination, technical workstream alignment, migration and cutover planning, schedule management, readiness, communications, stabilization, and transition to operations.
• Applies the same repeatable delivery discipline to future cybersecurity and infrastructure initiatives as the organization and project portfolio grow.
• Performs additional responsibilities as assigned.

Education

• Bachelor's degree in information technology, cybersecurity, engineering, business, project management, or a related field, or equivalent relevant experience.
• Advanced degree is a plus but not required.

Years and Type of Experience

• Minimum of 8 years of progressive project or program management experience, including leadership of complex enterprise technology initiatives.
• Demonstrated success leading cybersecurity, infrastructure, identity, compliance, resilience, or technology modernization programs with multiple workstreams and cross-functional dependencies.
• Experience leading complex technology programs within healthcare, medical device, life sciences, manufacturing, or another regulated industry is strongly preferred. Equivalent experience successfully delivering cybersecurity and infrastructure initiatives in a large, complex enterprise environment will also be considered.
• Experience working with executive sponsors, technical teams, auditors, vendors, business stakeholders, and globally distributed teams.
• Experience managing implementations, migrations, cutovers, operational transitions, and vendor-supported delivery.

Required Certification

• Project Management Professional (PMP) certification issued by the Project Management Institute (PMI).

Preferred Certifications or Experience

• Agile, Scrum, SAFe, PMI-ACP, or change management certification.
• Working familiarity with ISO 27001, information security management systems, PKI, identity and access management, infrastructure modernization, audit readiness, or related cybersecurity disciplines.
• Relevant cybersecurity or IT service management certification is a plus but is not required.

Key Skills, Knowledge & Capabilities

• Demonstrated ability to translate strategic objectives into executable program and project plans and deliver measurable outcomes in complex, cross-functional environments.
• Expertise in integrated schedule development, critical path management, milestone tracking, dependency management, forecasting, and recovery planning.
• Strong command of project governance, chartering, scope management, change control, status reporting, decision management, issue escalation, and project closeout.
• Ability to drive accountability and execution through influence without direct authority or people management responsibility.
• Practical knowledge of waterfall, agile, and hybrid delivery approaches and the judgment to apply them appropriately.
• Ability to lead technical initiatives effectively without serving as the technical product owner, architect, or engineer.
• Strong executive communication, facilitation, negotiation, problem-solving, and conflict-resolution skills.
• Ability to communicate clearly across technical, operational, audit, compliance, and business audiences.
• High degree of organization, urgency, judgment, follow-through, and attention to schedule and delivery details.
• Comfort operating in a growing organization where priorities, assignments, and governance relationships may evolve, including potential future alignment with an enterprise PMO.