cybersecurity program manager

Infinity Systems Engineering

<div><p>Infinity&rsquo;s niche in the aerospace and defense industry is specialized solutions that help bridge the gap between space and ground. This is no small task, and we owe our success to our team who help us fulfill our mission; to match people with their legacies for betterment of the world. There is always a place at Infinity for a motivated, capable individual seeking a career to better the world. We prioritize supporting our team through exceptional benefits, work-life balance, and structured career development. At Infinity, WE ARE MORE &ndash; now, come be more with us!</p><p><b><i><br>
**Please Note, this Position is Contingent Upon Program Award.**</i></b></p><div><b><br>
Position Overview</b></div><div>
The Program Manager will oversee the planning, execution, and successful delivery of complex cybersecurity services in support of the Rapid Resilient Command and Control (R2C2) Satellite Operations Ground System platform. This individual will work closely with government stakeholders, lead Agile teams, and ensure compliance with the Joint Special Access Program (SAP) Implementation Guide (JSIG) and other applicable standards. The role requires technical expertise in high-security environments, managing cross-functional teams, and ensuring the timely delivery of contractual deliverables with exceptional quality.</div><div></div><div><b><br>
Primary Responsibilities</b></div><div><ul><li>
Lead and manage the program execution by ensuring successful adherence to schedule, cost, and performance requirements</li><li>
Serve as the primary point of contact for the R2C2 Cybersecurity Product Owner and establish strong customer relationships through open communication and stakeholder engagement</li><li>
Oversee the management and compliance of cybersecurity services, including Cyber Monitoring, Threat Assessment, Certificate to Field (CtF), and Body of Evidence (BoE) Artifact Management</li><li>
Facilitate Agile project management practices, including sprint planning, backlog refinement, and iterative development cycles, as outlined in the R2C2 Agile Standard Operating Procedure (SOP)</li><li>
Manage risks, identify opportunities, and implement corrective action plans to address issues impacting project performance</li><li>
Organize and lead regular program status and working meetings, and prepare progress reports to provide real-time insight into program performance</li><li>
Oversee the development and submission of deliverables such as monthly status reports, Funds and Man Hours Expenditure Reports, and vulnerability reports</li><li>
Ensure compliance with personnel and facility security policies, including safeguarding classified information and maintaining secure SCIF/SAPF access</li></ul></div><div><div><b><br>
Minimum Qualifications</b></div><ul><li>
Active Security+ CE or equivalent certification</li><li>
Minimum 5 years of experience managing programs of similar scope, scale, and classification levels (including TS, SCI, and SAP environments)</li><li>
Demonstrated expertise implementing Agile frameworks for cybersecurity teams, including Jira and Confluence tools</li><li>
Experience with managing or delivering program increments, aligning risks/opportunities, and advancing incremental development goals</li><li>
Advanced proficiency in managing cybersecurity deliverables, including RMF-compliant documentation, vulnerability reports, and patch management oversight</li><li>
Advanced leadership skills, including the ability to provide strategic guidance and influence cross-functional teams to achieve program success</li><li>
Strong analytical and problem-solving skills, with demonstrated ability to assess risks and implement mitigation strategies proactively</li><li>
Excellent verbal and written communication skills to interface with government stakeholders and deliver high-quality briefings</li><li>
Strong attention to detail, ensuring compliance with stringent government standards and timelines</li><li>
Ability to adapt quickly in a dynamic and classified environment, ensuring all program objectives and tasks are met</li></ul></div><div><div><b>
Preferred Qualifications</b></div><ul><li>
Proven experience leading large, multi-disciplinary Agile teams in defense, government, or secure environments</li><li>
PMI Project Management Professional (PMP) or Program Management Professional (PgMP) certification</li><li>
Advanced certifications, such as PMI-ACP, Certified ScrumMaster (CSM), or Certified Cloud Security Professional (CCSP)</li><li>
Experience managing high-level configuration baselines and conducting cybersecurity assessments for highly classified systems</li><li>
Familiarity with tools like ACAS, Splunk SIEM, STIG Viewer, and eMASS for cybersecurity monitoring and compliance</li></ul><div></div><div><b><br>
Education/Experience</b></div><p>
Bachelor&rsquo;s degree in Information Technology (IT), Cybersecurity, Computer Science, Business Administration, Management Information Systems, or a related field. Master&rsquo;s degree preferred.</p><div><b><br>
Clearance Requirement</b></div></div><div><p>
Active Top-Secret clearance with eligibility for Sensitive Compartmented Information (SCI) and Special Access Program (SAP) access</p><div></div><div><div><b><br>
Travel Requirements</b></div><div>
Occasional travel required, approximately 10&ndash;25% of the time</div></div><div></div><p><b><br>
Infinity Benefits</b></p></div><div><div><ul><li><div><b><br>
Great Company Culture. </b>Infinity firmly believes that our success is due to the happiness and personal satisfaction of our employees.</div></li><li><div><b>
Health Benefits. </b><b><i>100% Company Paid</i></b><b> </b>Medical and Dental for you AND your family.</div></li><li><div><b>
Work that Stays at Work. </b>Genuine work/life balance and flexibility. We know our employees have lives outside of work and we support you in living them!</div></li></ul></div></div><div><div><ul><li><div><b>
Rest and Relaxation. </b>Three weeks' Vacation &ndash; Front Loaded on the day you start, and <i>we pay for you to go on our company reward trip</i> (ask us about this!)</div></li><li><div><b>
Health and Wellness.</b> We offer 48 hours of sick leave, in addition to your Vacation, as well as Flex-Spending options (Medical and Dependent Care)</div></li><li><div><b>
Prepare for the Future. </b>401(k) company contribution, with free professional financial planning advisors</div></li><li><div><b>
Education and Professional Training Reimbursement.</b> We support our employees career aspirations and growth!</div></li><li><div><b>
Profit Sharing Plan.</b> Infinity&rsquo;s success is due to our employees. Eligible employees are able to participate in our Profit-Sharing Plan.</div></li></ul></div></div><div><div><ul><li><div><b>
And more!</b></div></li></ul></div><div></div><div><div><br>
U.S. Citizenship is required.</div></div></div><div><div>
EOE including disability/vet</div></div><div></div><div><div><br>
To learn more about our company and benefits, please visit: <b>Infinity Careers</b></div></div><p></p><p><b><br>
Anticipated to Close: </b>04/06/26</p></div>

Program Manager

Legend Biotech

<div><div><p>Legend Biotech is a global biotechnology company dedicated to treating, and one day curing, life-threatening diseases. Headquartered in Somerset, New Jersey, we are developing advanced cell therapies across a diverse array of technology platforms, including autologous and allogenic chimeric antigen receptor T-cell, T-cell receptor (TCR-T), and natural killer (NK) cell-based immunotherapy. From our three R&amp;D sites around the world, we apply these innovative technologies to pursue the discovery of safe, efficacious and cutting-edge therapeutics for patients worldwide.</p><br>
<p></p>
<p>
Legend Biotech entered into a global collaboration agreement with Janssen, one of the pharmaceutical companies of Johnson &amp; Johnson, to jointly develop and commercialize ciltacabtagene autolecuel (cilta-cel). Our strategic partnership is designed to combine the strengths and expertise of both companies to advance the promise of an immunotherapy in the treatment of multiple myeloma.</p></div><p></p><p><br>
Legend Biotech is seeking a <b>Cybersecurity Systems Project Manager (Contractor)</b> as part of the <b>IT </b>team based in <b>Somerset, NJ.</b></p>
<p><b>
Role Overview</b></p>
<p>
The Cybersecurity Systems Project Manager is responsible for planning, executing, and delivering cybersecurity initiatives that protect organizational systems, networks, and data. This role bridges cybersecurity, IT, and business stakeholders to ensure security projects are delivered on time, within scope, and aligned with regulatory and risk management requirements.</p>
<p>
Contract Duration: 12 Months</p>
<p><b>
Key Responsibilities</b></p>
<p><b>
Project &amp; Program Management</b></p>
<ul>
<li>Lead end-to-end cybersecurity system projects, including planning, execution, monitoring, and closure</li>
<li>Define project scope, goals, deliverables, timelines, and success criteria</li>
<li>Manage project budgets, schedules, dependencies, and resource allocation</li>
<li>Track milestones, risks, issues, and mitigation plans</li>
</ul>
<p><b>Cybersecurity &amp; Technical Coordination</b></p>
<ul>
<li>Oversee implementation of cybersecurity systems such as:
<ul><li>SIEM, SOAR, EDR/XDR</li>
<li>Identity and Access Management (IAM)</li>
<li>Network security, firewalls, and zero trust architecture</li>
<li>Vulnerability management and security monitoring tools</li>
</ul></li></ul><ul><li>Coordinate with security architects, engineers, and vendors to ensure technical requirements are met</li>
<li>Ensure security solutions align with enterprise architecture and IT standards</li>
</ul>
<p><b>Risk, Compliance &amp; Governance</b></p>
<ul>
<li>Ensure projects comply with cybersecurity frameworks and regulations (e.g., NIST, ISO 27001, CIS, SOC 2, HIPAA, PCI-DSS as applicable)</li>
<li>Support risk assessments, security controls implementation, and audit readiness</li>
<li>Maintain project documentation, security artifacts, and reporting</li>
</ul>
<p><b>Stakeholder &amp; Vendor Management</b></p>
<ul>
<li>Serve as the primary liaison between cybersecurity teams, IT operations, business units, and leadership</li>
<li>Communicate project status, risks, and outcomes to executive and technical audiences</li>
</ul>
<p><b>Continuous Improvement</b></p>
<ul>
<li>Identify opportunities to improve cybersecurity project delivery processes</li>
<li>Contribute to cybersecurity roadmap planning and prioritization</li>
</ul>
<p><b>Requirements</b></p>
<ul>
<li>Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field (or equivalent experience).</li>
<li>Certifications (Preferred)
<ul><li>PMP, PgMP, or PRINCE2</li>
<li>CISSP, CISM, or CISA</li>
<li>Agile/Scrum certifications (CSM, SAFe, etc.)</li>
</ul></li><li>5+ years of project management experience, including 3+ years in cybersecurity or IT infrastructure projects</li>
<li>Strong understanding of cybersecurity concepts, tools, and risk management principles</li>
<li>Proven experience managing cross-functional technical teams</li>
<li>Strong communication, documentation, and leadership skills</li>
<li>Experience with Agile, Scrum, or hybrid project delivery models</li>
<li>ITIL concepts (incident, problem, change management)</li>
<li>Ticketing systems (ServiceNow, Jira, etc.)</li>
<li>Change advisory boards (CAB)</li>
<li>SLAs and operational handoffs</li>
</ul>
<p>#Li-BG1</p>
<p>
#Li-Hybrid</p>
<p>
#Li-Contract</p><div><p><b>
Please note: These benefits are offered exclusively to permanent full-time employees. Contractors are not eligible for benefits through Legend Biotech.</b></p><br>
<p></p>
<p><b>
EEO Statement</b></p>
<p>
It is the policy of Legend Biotech to provide equal employment opportunities without regard to actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth, related medical conditions and lactation), gender identity or gender expression (including transgender status), sexual orientation, marital status, military service and veteran status, disability, genetic information, or any other protected characteristic under applicable federal, state or local laws or ordinances.</p><br>
<p></p>
<p>
Employment is at-will and may be terminated at any time with or without cause or notice by the employee or the company.</p><div><br>
</div>
<div>For information related to our privacy notice, please review: Legend Biotech Privacy Notice.</div></div></div>

Cybersecurity Systems Project Manager (Contractor)

Peraton

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
Peraton is seeking incumbent and external qualified candidates to support North American Aerospace Defense Command (NORAD) Cheyene Mountain Complex (NCMC) &ndash; Integrated Tactical Warning/Attack Assessment (NCMC-ITW/AA) and Space Support Contract III (NISSC III).</div><div><br>
Please note that this is contingent upon contract award, with an anticipated decision expected by summer 2026.</div><div><br>
Qualified candidates will help operate, maintain, and sustain critical national mission systems to deliver resilient strategic threat warning and space capabilities as part of a world-wide architecture, providing strategic warning that our nation depends on during a conflict. This program will provide an opportunity to exploit the capabilities inherent in our diverse national systems to better meet the needs of the national command authority and warfighters to detect, track, and respond to strategic threats through 2030 and beyond.</div><div></div><div><br>
We are seeking a highly experienced <b>Cyber Security professional </b>to serve as the Senior Cybersecurity Task Manager and primary cyber security point of contact (POC) for this mission critical program.</div><div></div><div><b><br>
Key Responsibilities:</b></div><ul><li>
Oversee the design, development, and implementation of security requirements within an organization&rsquo;s business processes.</li><li>
Confirm documentation is prepared from information obtained from customers using accepted guidelines.</li><li>
Verify training materials, technical material and data address relevant RMF</li><li>
Coordinate the preparation of security test and evaluation plans</li><li>
Select and work with suppliers and designers to develop and finalize the MSOC and BMSOC design and coordinate the design with the Customer for approval with programmatic functional teams and the Customer.</li><li>
Provides certification and accreditation support in the development of security and contingency plans and conducts complex risk and vulnerability assessments.</li><li>
Serve as the primary cybersecurity POC for the program.</li><li>
Investigate and analyze unique or highly technical operational and Customer issues by providing technical assistance in establishing procedures and processes to resolve or avoid similar issues in the future.</li><li>
Analyze policies and procedures against Federal laws and regulations and provide recommendations for closing gaps.</li><li>
Recommend system enhancements to improve security deficiencies.</li><li>
Develops, tests, and integrates computer and network security tools.</li><li>
Review and evaluate complex non-nominal observations to include crew deviations and implement corrective action as needed.</li><li>
Oversee the inclusion of securing of system configurations and installation of security tools, system scans to determine compliance. document, report results and evaluate products and various aspects of system administration.</li><li>
Conducts security program audits and develops solutions to lessen identified risks.</li><li>
Provides information assurance support for the development and implementation of security architectures to meet new and evolving security requirements.</li><li>
Oversee the completion of computer incident investigations.</li><li>
Confirm that vulnerability assessments including development of risk mitigation strategies are performed</li><li>
Interface with government Customers, vendors, subcontractors, and program members to resolve cybersecurity related technical and quality problems.</li><li>
Perform complex technical surveillance to improve operational support, improve procedures, identify improvements in software, and increase quality by reducing operational risk.</li><li>
Provide guidance to Customer and program leadership in the areas of producibility, cybersecurity processes, equipment improvement, quality control, software quality and configuration management, and procurement</li><li>
Communicate and collaborate effectively with stakeholders to foster support for program objectives.</li><li>
Oversee project efforts to ensure cybersecurity execution remains on schedule and within budget.
</li><li>Work with PMO and TPOCs to define cybersecurity requirements, schedules, performance criteria, project kick-off briefings, and other technical reports and documents as required for program deliverables.</li><li>
Provide recommendations based on technical assessments and present findings to key decision-makers.</li><li>
Attend and host meetings as required by the Customer or in support of Customer defined deliverables and brief cybersecurity reports and findings as required.</li><li>
Supervise and mentor junior cybersecurity professionals as needed.</li><li>
Ensure seamless communication and collaboration across programmatic functional teams.</li><li>
Support the PMO by conducting programmatic and technical evaluations.</li><li>
Manage multiple projects and priorities effectively.</li></ul><div></div><div><b><br>
****This position is contingent upon award of contract****</b></div></div></div><div><h5 class="jobSectionHeader"><b>
QUALIFICATIONS</b></h5><div><div><b>
Required Qualifications:</b></div><ul><li>
Ten 10 years of relevant experience developing cybersecurity requirements, schedules, FTE estimates, performance criteria, CDRL definitions, and project kick-off briefings.</li><li>
Active TS/SCI clearance.</li><li>
Proven ability leading cybersecurity operations in relation to space operational and or ground systems</li><li>
Previous experience developing and implementing cybersecurity procedures and processes IAW NIST 800-53 and DOD RFM.</li><li>
Previous experience evaluating cybersecurity measures and techniques for compliance to meet DoD and NIST requirements demonstrated by successfully completing CCRI or CORA inspection.</li><li>
Experience leading teams of more than 10 technical IT and Cybersecurity engineers.</li><li>
Ability to travel 25% of the time while meeting operational obligations.</li></ul><div></div><div><b><br>
Desired Qualifications:</b></div><ul><li>
Military training that meets 8140.03 &ldquo;Advanced Technical Expertise&rdquo; requirements CISSP, CISM, GSLC, CISSP-ISSMP, or CISA Certification</li><li>
Experience supporting facility design and development or upgrade</li><li>
Previous experience associated with Resilient MW/MT, OPIR, or Space Systems operations is highly desired.</li><li>
Expertise in theory of operations, performance characteristics, vulnerability, and employment of foreign weapons systems.</li><li>
Experience leading analysis, evaluation, and assessment of intelligence information on defensive systems and technologies.</li></ul></div></div><div></div><div><h5 class="jobSectionHeader"><b><br>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p><b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Duration Statement:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

CYBERSECURITY OPERATIONS LEAD

Vanguard

<div><div>The Security Assurance Specialist III leads the end to end coordination and execution of application and infrastructure security risk assessments, ensuring consistent, timely, and high quality identification of cybersecurity risks and vulnerabilities. The role partners closely across cybersecurity, IT engineering teams, and business stakeholders to enable effective risk and vulnerability management across the enterprise. Acting as the central assessment orchestration function, the specialist manages assessment intake, prioritization, scheduling, documentation, execution tracking, reporting, and vulnerability workflow oversight. The role blends deep cybersecurity risk expertise with strong program and project management discipline, leveraging Agile and Scrum based practices to meet defined SLAs, quality standards, and reporting expectations. The Security Assurance Specialist III provides expert level technical guidance in evaluating and strengthening the security posture of Vanguard&rsquo;s systems, architectures, and configurations. This role coordinates and leads comprehensive security assessments, validates risk findings, and supports remediation strategies across critical business applications, infrastructure, networks, and web platforms. Through close collaboration with technology and business partners, the specialist influences secure solution design, drives strategic security improvements, and supports the continuous maturation of Vanguard&rsquo;s security capabilities. **this Hybrid Role (in office Tues-Wed-Thurs) is based in Charlotte, NC, Dallas, TX, or Malvern, PA**</div><div><p>
The Security Assurance Specialist III leads the end‑to‑end coordination and execution of application and infrastructure security risk assessments, ensuring consistent, timely, and high‑quality identification of cybersecurity risks and vulnerabilities. The role partners closely across cybersecurity, IT engineering teams, and business stakeholders to enable effective risk and vulnerability management across the enterprise.</p><p>
Acting as the central assessment orchestration function, the specialist manages assessment intake, prioritization, scheduling, documentation, execution tracking, reporting, and vulnerability workflow oversight. The role blends deep cybersecurity risk expertise with strong program and project management discipline, leveraging Agile and Scrum‑based practices to meet defined SLAs, quality standards, and reporting expectations.</p><p></p><p>
The Security Assurance Specialist III provides expert‑level technical guidance in evaluating and strengthening the security posture of Vanguard&rsquo;s systems, architectures, and configurations. This role coordinates and leads comprehensive security assessments, validates risk findings, and supports remediation strategies across critical business applications, infrastructure, networks, and web platforms. Through close collaboration with technology and business partners, the specialist influences secure solution design, drives strategic security improvements, and supports the continuous maturation of Vanguard&rsquo;s security capabilities.</p><p></p><p>
**this Hybrid Role (in office Tues-Wed-Thurs) is based in Charlotte, NC, Dallas, TX, or Malvern, PA**</p><p></p><p><b>
Key Responsibilities:</b></p><ul><li>
Provide programmatic support and coordination for application and infrastructure security assessments.</li><li>
Own and manage the assessment lifecycle from intake through final reporting and closure.</li><li>
Coordinate assessment scheduling across multiple concurrent engagements, balancing priorities, dependencies, and resource availability.</li><li>
Partner with application teams, infrastructure owners, and product stakeholders to gather pre‑assessment information, technical documentation, architecture diagrams, and required artifacts.</li><li>
Ensure assessment scope, assumptions, and prerequisites are clearly defined and validated prior to execution.</li><li>
Engage and coordinate assessment resources across cybersecurity and relevant IT divisions (e.g., engineering, infrastructure, cloud, platform teams).</li><li>
Act as the primary point of coordination between assessment teams and technology stakeholders to resolve scheduling conflicts, clarify requirements, and manage expectations.</li><li>
Facilitate effective communication across technical and non‑technical audiences, ensuring transparency of status, risks, and dependencies.</li><li>
Escalate risks, delays, or resource constraints in a timely and structured manner.</li><li>
Ensure accurate and timely tracking of assessment activities, milestones, and deliverables leveraging enterprise toolsets and applications.</li><li>
Maintain high data quality standards for assessment records, findings, vulnerabilities, and workflow states in assessment and vulnerability tracking platforms.</li><li>
Coordinate the publication of draft and final assessment reports, ensuring appropriate review cycles, approvals, and distribution to stakeholders.</li><li>
Support audit‑ready documentation and traceability across assessments, findings, and risk decisions.</li><li>
Support the collection, review, and routing of identified vulnerabilities through defined remediation, exception, or risk acceptance workflows.</li><li>
Coordinate vulnerability review and acceptance processes with technology owners, risk stakeholders, and governance bodies.</li><li>
Ensure vulnerabilities are properly documented, tracked, and dispositioned in alignment with enterprise risk standards and timelines.</li><li>
Monitor remediation progress and support reporting on overdue, at‑risk, or escalated items.</li><li>
Support the collection, analysis, and reporting of assessment program metrics, including throughput, cycle time, backlog, and SLA adherence.</li><li>
Produce regular operational and management reporting to support capacity planning, prioritization, and performance transparency.</li><li>
Identify trends, bottlenecks, and improvement opportunities across the assessment lifecycle.</li><li>
Contribute to the continuous improvement of assessment processes, tooling, templates, and operating procedures.</li><li>
Apply program and project management best practices to manage complex, multi‑workstream assessment activities.</li><li>
Maintain assessment roadmaps, intake queues, and execution plans aligned to business and technology priorities.</li><li>
Leverage Agile and Scrum‑style practices where appropriate, including backlog management, sprint planning, stand‑ups, retrospectives, and dependency tracking.</li><li>
Act as a Scrum Master‑like facilitator for assessment delivery, removing impediments and enabling teams to operate efficiently.</li><li>
Support change management, stakeholder communications, and readiness activities for evolving assessment methodologies or tooling.</li></ul><p></p><p><b>
Education &amp; Experience:</b></p><p>
Bachelor&rsquo;s degree in Information Security, Information Technology, Risk Management, or a related field (or equivalent experience).</p><p>
5+ years of experience in cybersecurity, IT risk management, GRC, or security assessment coordination roles.</p><p>
Demonstrated experience coordinating application and/or infrastructure security assessments in large, regulated, or complex environments.</p><p>
Hands‑on experience with GRC platforms, preferably RSA Archer, including assessment tracking, findings management, and workflow.</p><p>
Strong understanding of cybersecurity risk concepts, vulnerabilities, and control assessment practices.</p><p></p><p><b>
Preferred Qualifications &amp; Certifications:</b></p><p>
Experience working with NIST CSF, NIST 800‑53, ISO 27001, CIS Controls, or similar frameworks.</p><p>
Program or project management certifications (PMP, PgMP, PRINCE2) or Agile/Scrum certifications (CSM, SAFe, PMI‑ACP).</p><p>
Familiarity with vulnerability management, remediation tracking, and risk acceptance processes.</p><p>
Experience supporting metrics, dashboards, and SLA‑driven operational reporting.</p><p></p><p><b>
Key Skills &amp; Competencies:</b></p><p>
Program &amp; Project Management: Planning, prioritization, dependency management, and delivery execution.</p><p>
Agile / Scrum Facilitation: Backlog management, impediment removal, team coordination.</p><p>
Stakeholder Management: Ability to influence and coordinate across security, IT, and business teams.</p><p>
Operational Rigor: Attention to detail, documentation quality, and audit readiness.</p><p>
Communication: Clear, concise communication of technical risk information to varied audiences.</p><p>
Process Improvement: Continuous improvement mindset with the ability to standardize and scale operations.</p><p></p><p><b>
Special Factors</b></p><p><b>
Sponsorship</b></p>
Vanguard is not offering visa sponsorship for this position.<p></p><p><b>
About Vanguard</b></p><p>
At Vanguard, we don't just have a mission&mdash;we're on a mission.</p><p></p><p>
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.</p><p></p><p><b>
How We Work</b></p><p>
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.</p></div></div>

Senior Security Assurance Specialist

Guidehouse

<div><p>Job Family:</p>
Cyber Consulting, IT Project Management, IT Project Management (Digital), Technology Consulting<p><br>
Travel Required:</p>
Up to 25%<p><br>
Clearance Required:</p>
None<p>
What You Will Do:</p><p>
Program &amp; Project Leadership</p><ul><li>
Lead multi‑workstream cybersecurity implementation projects&mdash;including IAM, MFA modernization, SSO/identity federation, SIEM/SOAR integrations, endpoint/XDR deployments, PAM rollouts, and cloud security solutions.</li><li>
Develop project plans, charters, roadmaps, work breakdown structures, RACI charts, and governance artifacts for technical deployments.</li><li>
Guide scoping, requirements gathering, backlog definition, and sprint planning; ensure alignment between technical teams and business owners.</li><li>
Drive delivery methodology (Agile, hybrid, or waterfall) tailored to client needs.</li></ul><p>
Delivery &amp; Execution Excellence</p><ul><li>
Manage schedules, risks, dependencies, milestones, and budgets across multiple engineering teams.</li><li>
Coordinate vendor and third‑party solution providers (e.g., Okta, SailPoint, CyberArk, MSFT, CrowdStrike, Splunk, etc.).</li><li>
Facilitate status reporting, executive briefings, and PMO‑aligned deliverables (RAIDs, change requests, dashboards, earned value metrics).</li><li>
Support the deployment lifecycle: design reviews, implementation readiness, cutover planning, hypercare, acceptance testing, and operational transition.</li></ul><p>
Technical Management</p><ul><li>
Possess solid comprehension of cybersecurity domains to manage and challenge implementation teams:</li><li>
Identity &amp; Access Management (IAM), SSO/MFA, Zero Trust, endpoint protection, SIEM/SOAR, threat intelligence, cloud security, network security, and application security.</li><li>
Understand high‑level architecture diagrams, integration patterns, and technical dependencies to ensure sequencing and delivery alignment.</li><li>
Translate between business, security, and technical teams to ensure clarity and alignment.</li></ul><p>
Stakeholder Engagement &amp; Communication</p><ul><li>
Coordinate with cross‑functional teams&mdash;security operations, IT, DevOps, cloud, compliance, and executive sponsors.</li><li>
Lead workshops, status meetings, risk reviews, and executive steering committees.</li><li>
Ensure exceptional stakeholder experience by promoting transparency, alignment, and proactive communication.</li></ul><p>
Organizational Impact</p><ul><li>
Identify delivery risks, interdependencies, and improvement opportunities across programs.</li><li>
Support proposal efforts, LOE development, resource planning, team staffing, and pursuit/orals support.</li><li>
Mentor junior project managers and analysts; contribute to Guidehouse program delivery standards and playbooks.</li></ul><p>
What You Will Need:</p><ul><li>
Due to nature of client engagement, must be a US Citizen</li><li>
High School diploma AND Fourteen (14+) plus years of paid professional experience with multiple years leading technical or cybersecurity project delivery; Or Associate&rsquo;s degree AND Twelve (12+) plus years of paid professional experience with multiple years leading technical or cybersecurity project delivery; Or Bachelors&rsquo; degree AND Ten (10+) plus years of professional experience with multiple years leading technical or cybersecurity project delivery.</li><li>
Strong understanding of cybersecurity implementation lifecycles (IAM, MFA/SSO, SIEM/SOAR, endpoint/XDR, cloud security, PAM, vulnerability management).</li><li>
Demonstrated success managing multi‑team projects in state &amp; local government and/or commercial environments.</li><li>
Proficiency with project management tools (JIRA, Azure DevOps, MS Project, Smartsheet, Confluence, ServiceNow, etc.).</li><li>
Ability to interpret technical documentation, understand architecture diagrams, and manage complex dependencies.</li><li>
Exceptional communication, stakeholder management, risk management, and executive‑facing presentation skills.</li><li>
Ability to travel.</li><li>
Ability to work onsite in a Guidehouse Office or Client Office location as needed.</li></ul><p>
What Would Be Nice To Have:</p><ul><li>
Preference will be given to candidate who reside within reasonable driving distance of a Guidehouse Office or Client Office Location.</li><li>
Experience overseeing deployments involving:<ul><li>
IAM platforms (Okta, Azure AD/Entra, SailPoint, CyberArk, Ping, Radiant Logic)</li><li>
SIEM/SOAR platforms (Splunk, Sentinel, Elastic, QRadar, IBM SOAR, Palo Alto Cortex XSOAR)</li><li>
Endpoint security / XDR (CrowdStrike Falcon, Microsoft Defender, SentinelOne, Carbon Black)</li><li>
Zero Trust initiatives, SASE, identity‑driven security</li></ul></li><li>
Cybersecurity certifications (Security+, CISSP, CCSP, CISM, GIAC PM/Cloud/Detection certs)</li><li>
Experience working with OT/critical infrastructure security deployments (optional)</li><li>
Experience managing cross‑vendor program environments with integrators, MSSPs, and third‑party solution providers</li><li>
Experience with FedRAMP or NIST frameworks</li><li>
Any of the PMP, PMI‑ACP, CSM, SAFe, or equivalent PM certifications</li></ul><p>
#LI-DNI</p>
The annual salary range for this position is $135,000.00-$225,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.<p><br>
What We Offer:</p><p>
Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.</p><p>
Benefits include:</p><ul><li><p>
Medical, Rx, Dental &amp; Vision Insurance</p></li><li><p>
Personal and Family Sick Time &amp; Company Paid Holidays</p></li><li><p>
Position may be eligible for a discretionary variable incentive bonus</p></li><li><p>
Parental Leave and Adoption Assistance</p></li><li><p>
401(k) Retirement Plan</p></li><li><p>
Basic Life &amp; Supplemental Life</p></li><li><p>
Health Savings Account, Dental/Vision &amp; Dependent Care Flexible Spending Accounts</p></li><li><p>
Short-Term &amp; Long-Term Disability</p></li><li><p>
Student Loan PayDown</p></li><li><p>
Tuition Reimbursement, Personal Development &amp; Learning Opportunities</p></li><li><p>
Skills Development &amp; Certifications</p></li><li><p>
Employee Referral Program</p></li><li><p>
Corporate Sponsored Events &amp; Community Outreach</p></li><li><p>
Emergency Back-Up Childcare Program</p></li><li><p>
Mobility Stipend</p></li></ul><p>
About Guidehouse</p><p>
Guidehouse is an Equal Opportunity Employer&ndash;Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.</p><p>
Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.</p><p>
If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.</p><p>
All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or guidehouse@myworkday.com. Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.</p><p>
If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse&rsquo;s Ethics Hotline. If you want to check the validity of correspondence you have received, please contact recruiting@guidehouse.com. Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant&rsquo;s dealings with unauthorized third parties.</p><p>
Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.</p></div>

Technical Project Manager-Cybersecurity

You desire impactful work.
<br><br>
You’reRGA ready
<br><br>
RGA is a purpose-driven organization working to solve today’s challenges through innovation and collaboration. A Fortune 200 Company and listed among itsWorld’s Most Admired Companies, we’re the only global reinsurance company to focus primarily on life- and health-related solutions. Join our multinational team of intelligent, motivated, and collaborative people, and help us make financial protection accessible to all.
<br><br>
The Executive Director of Cybersecurity Strategy, Governance,& Engagement is responsible for shaping, operationalizing, and communicating the enterprise cybersecurity strategy while driving measurable outcomes and a strong security culture across the organization. This role combines strategic planning, performance management, training& awareness and organizational engagement to help ensure cybersecurity capabilities are aligned with business objectives, current threats, and regulatory expectations.
<br><br>
The Executive Director serves as a strategic partner to the VP, Cybersecurity Strategy, Governance, and Oversight as well as the Chief Information Security Officer and other IT and security leaders and teams, translating cybersecurity vision into actionable roadmaps, meaningful metrics, and enterprise-wide engagement initiatives.
<br><br>
Principal Duties
<br><br>
Cybersecurity Governance, Strategy& Planning
<br><br>
<ul>
<li>Partner with the VP, Cybersecurity Strategy, Governance, and Oversight to define, evolve, and maintain the enterprise cybersecurity strategy and multi‑year roadmap</li>
<li>Translate cybersecurity strategy into strategic objectives, key results, initiatives, investment priorities, and governance expectations</li>
<li>Establish and maintain cybersecurity governance frameworks, including decision rights, accountability, and escalation paths</li>
<li>Partner with security teams to define and contribute to cybersecurity requirements that guide and shape execution across security and technology workstreams</li>
<li>Ensure cybersecurity strategy is clearly documented and communicated across technical, executive, and board‑level audiences</li>
<li>Provide oversight and transparency through consistent reporting on strategy execution and progress against the roadmap</li>
</ul>
Cybersecurity Metrics& Reporting
<br><br>
<ul>
<li>Design, implement, and maintain a comprehensive cybersecurity key risk and key performance indicator framework</li>
<li>Develop executive dashboards, scorecards, and regular reporting packages that communicate security posture, trends, and program effectiveness to technical and non-technical stakeholders</li>
<li>Collect, analyze, and synthesize data from multiple security tools and sources to identify patterns, gaps, and opportunities for improvement</li>
<li>Establish baseline measurements and track progress against cybersecurity program goals and regulatory compliance requirements</li>
<li>Collaborate with security operations, architecture, engineering, risk management, and compliance teams to ensure metrics accurately reflect security outcomes</li>
<li>Lead the development of executive presentations on cybersecurity program performance</li>
</ul>
Cybersecurity Engagement
<br><br>
<ul>
<li>Develop and execute a cybersecurity awareness and training strategy tailored to different audiences, roles, and risk profiles</li>
<li>Identify opportunities for engaging training content, including e-learning modules, workshops, simulations, phishing campaigns, and microlearning materials</li>
<li>Collaborate with cross-functional learning teams to implement organization-wide security awareness campaigns utilizing multiple channels (e.g., email, intranet, videos, posters, events)</li>
<li>Establish metrics to measure training effectiveness, behavior change, and cultural adoption of security best practices</li>
<li>Partner with Human Resources, Internal Communications, and business units to integrate security awareness into onboarding, role changes, and ongoing professional development</li>
<li>Oversee and coordinate security outreach initiatives such as Cybersecurity Awareness Month activities, Security Communications initiatives, lunch-and-learns, and executive briefings</li>
<li>Stay current with emerging threats and attack trends to ensure training content remains relevant and timely</li>
</ul>
Cross-Functional Leadership
<br><br>
<ul>
<li>Collaborate with security leadership and domain subject matter experts to align metrics and training initiatives with overall cybersecurity strategy</li>
<li>Build relationships across IT, Legal, Compliance, Risk Management, and business stakeholders</li>
<li>Manage vendor relationships related to training platforms, awareness tools, and reporting solutions</li>
</ul>
Qualifications
<br><br>
Education and Certifications
<br><br>
<ul>
<li>Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Business Administration, Communications, or related field, or equivalent experience - Required</li>
<li>Post-graduate or professional qualification in related field - Preferred</li>
<li>Relevant industry certifications such as CISSP, CISM, CRISC, Security+, or similar - Preferred</li>
<li>Training or instructional design certifications (e.g., CPTD, ATD certification) - Preferred</li>
</ul>
Work Experience, Skills, and Abilities
<br><br>
<ul>
<li>10+ years’ relevant technology and business experience - Required</li>
<li>Minimum 5-7 years of progressive experience in cybersecurity, information security, or IT risk management - Required</li>
<li>Demonstrated experience developing and implementing cybersecurity metrics, KPIs, and reporting frameworks - Required</li>
<li>Proven experience developing, executing, and maturing cybersecurity strategies and roadmaps aligned to enterprise business objectives - Required</li>
<li>Proven track record of designing and delivering cybersecurity training and awareness programs - Required</li>
<li>Experience creating executive-level presentations and communicating technical concepts to non-technical audiences - Required</li>
<li>Strong analytical skills with experience collecting, analyzing, and visualizing security data - Required</li>
<li>Hands-on experience with security tools, technologies, and frameworks (NIST CSF, ISO 27001, CIS Controls) - Required</li>
<li>Experience managing projects and coordinating cross-functional initiatives - Required</li>
<li>Experience in a regulated industry (financial services, insurance, government, etc.) - Preferred</li>
<li>Background in strategy, governance, risk management, or compliance functions - Preferred</li>
<li>Proficiency with data management, data visualization, and business intelligence tools (e.g., Power BI, Snowflake, Alteryx) - Preferred</li>
<li>Experience with learning management systems (LMS) and security awareness platforms (e.g., KnowBe4, Proofpoint, SANS Security Awareness) - Preferred</li>
<li>Experience conducting phishing simulations - Preferred</li>
<li>Knowledge of adult learning principles and instructional design methodologies - Preferred</li>
<li>Prior experience managing vendor relationships and procurement processes - Preferred</li>
<li>Demonstrated success in driving cultural change and influencing behavior across organizations - Preferred</li>
<li>Experience with Governance, Risk, and Compliance (GRC) platforms - Preferred</li>
</ul>
#LI-CW1
<br>#LI-Remote
<br><br>
<b>What you can expect from RGA:</b><br>
<ul>
<li>Gain valuable knowledge from and experience with diverse, caring colleagues around the world.</li>
<li>Enjoy a respectful, welcoming environment that fosters individuality and encourages pioneering thought.</li>
<li>Join the bright and creative minds of RGA, and experience vast, endless career potential.</li>
</ul>
We’re excited to get to know you and connect your unique skills with our global opportunities. To create a modern and seamless experience, we use artificial intelligence (AI) in parts of our preliminary screening process. This technology helps us personalize job recommendations, automate interview scheduling, evaluate candidates based solely on experience—without considering name, gender, or other personal details—and provide real-time answers through our chatbot. AI is used only during early screening and never makes hiring decisions. Your RGA recruiter will work closely with you every step of the way to ensure the process feels personal, thoughtful, and focused on you.
<br><br>
<b>Compensation Range:</b><br>
$150,770.00 - $224,640.00 Annual
<br>Base pay varies depending on job-related knowledge, skills, experience and market location. In addition, RGA provides an annual bonus plan that includes all roles and some positions are eligible for participation in our long-term equity incentive plan. RGA also maintains a full range of health, retirement, and other employee benefits.
<br><br>
RGA is an equal opportunity employer. Qualified applicants will be considered without regard to race, color, age, gender identity or expression, sex, disability, veteran status, religion, national origin, or any other characteristic protected by applicable equal employment opportunity laws.

Executive Director, Cybersecurity Strategy, Governance, & Engagement

Starbucks

<div><p><b>Now Brewing &ndash; Cybersecurity Analyst, Sr. &ndash; Governance Risk &amp; Compliance! #tobeapartner</b></p><p>
From the beginning, Starbucks set out to be a different kind of company. One that not only celebrated coffee and the rich tradition, but that also brought a feeling of connection. We are known for developing extraordinary leaders who share this passion and are guided by their service to others.</p><p><br>
Are you passionate about leading complex technical initiatives that strengthen our security posture and protect our partners, customers and brand? As a Cybersecurity Analyst, Sr. on the Cybersecurity Project Management team, you will drive high-impact, cross-functional programs and initiatives that deliver governance, risk and compliance and risk-mitigation capabilities across the enterprise.</p><p><br>
You bring clarity to ambiguity, create structure in fast-moving environments and execute with precision. This role requires a strategic thinker who is deeply hands-on, capable of guiding programs from initial concept through planning, execution, deployment and successful closeout. You will partner closely with engineering, security and business teams to translate cybersecurity compliance requirements into actionable plans that deliver measurable outcomes and reduce organizational risk.</p><p></p><p><b><br>
As a Cybersecurity Analyst, Sr, you will&hellip;</b></p><ul><li>
Lead large-scale, highly complex cybersecurity, infrastructure and governance, risk and compliance (GRC) initiatives from concept to delivery, coordinating across multiple teams and regions.</li><li>
Translate complex technical and security and compliance challenges into structured, actionable project plans, ensuring alignment and coordination across cross-functional delivery teams.</li><li>
Drive execution with rigor and attention to detail, while maintaining strong governance and risk management practices.</li><li>
Communicate with executive presence, delivering crisp updates and influencing decision-making across all levels of the organization.</li><li>
Develop and execute organizational change management plans &ndash; including communication strategies, readiness assessments, stakeholder engagement and training coordination across multiple concurrent projects.</li></ul><br>
<p><i>
We&rsquo;d love to hear from people with:</i></p><ul><li>
10+ years of analyst or program/project management experience, including 3+ years leading and supporting governance, risk and compliance programs within large or highly regulated organizations.</li><li>
Proven success managing large, cross-functional programs with multiple workstreams and global stakeholders.</li><li>
Familiarity with GRC processes and frameworks including PCI DSS, SWIFT, SOC 2, ISO 27001/27002, NIST CSF, and broader enterprise risk management practices.</li><li>
Experience managing deployment and integration of technical or security solutions across global environments, ensuring alignment with enterprise controls, standards and audit/compliance requirements.</li><li>
Hands-on experience supporting compliance initiatives (e.g. evidence collection, control validation, remediation planning, reporting), with the ability to translate requirements to actionable delivery plans.</li><li>
Strong organizational skills and a proactive, execution-focused mindset, with a track record of driving clarity, managing risk, and delivering results in fast-paced or ambiguous environments.</li><li>
Ability to anticipate compliance risks, identify control gaps, and partner with engineering, security and audit teams to ensure effective remediation and sustainable control posture.</li><li>
Experience applying organizational change management (OCM) frameworks (e.g. ADKAR, Prosci) across technical, security or compliance-driven initiatives</li></ul><p></p><div><p><br>
As a Starbucks partner, you (and your family) will have access to medical, dental, vision, basic and supplemental life insurance, and other voluntary insurance benefits. Partners have access to short-term and long-term disability, paid parental leave, family expansion reimbursement, paid vacation from date of hire*, sick time (accrued at 1 hour for every 25 hours worked), eight paid holidays, and two personal days per year. Starbucks also offers eligible partners participation in a 401(k) retirement plan with employer match, a discounted company stock program (S.I.P.), Starbucks equity program (Bean Stock), incentivized emergency savings, and financial well-being tools. Additionally, Starbucks offers 100% upfront tuition coverage for a first-time bachelor&rsquo;s degree through Arizona State University&rsquo;s online program via the Starbucks College Achievement Plan, student loan management resources, and access to other educational opportunities. You will also have access to backup care and DACA reimbursement. Starbucks will comply with any applicable state and local laws regarding employee leave benefits, including, but not limited to providing time off pursuant to the Colorado Healthy Families and Workplaces Act, and in accordance with its plans and policies. This list is subject to change depending on collective bargaining in locations where partners have a certified bargaining representative. For additional information regarding partner perks and more detailed information about benefits, go to starbucksbenefits.com.</p></div><div><ul><li>If you are working in CA, CO, IL, LA, ME, MA, NE, ND or RI, you will accrue vacation up to a maximum of 120 hours (190 in CA) for roles below director and 200 hours (316 in CA) for roles at director or above. For roles in other states, you will be granted vacation time starting at 120 hours annually for roles below director and 200 hours annually for roles director and above.</li></ul></div><p></p><div><p><br>
The actual base pay offered to the successful candidate will be based on multiple factors, including but not limited to job-related knowledge/skills, experience, geographical location, and internal equity. At Starbucks, it is not typical for an individual to be hired at the high end of the range for their role, and compensation decisions are dependent upon the facts and circumstances of each position and candidate.</p></div><p></p><div><p><b><br>
Join us and </b><b>inspire with</b><b> </b><b>every</b><b> cup. Apply today!</b></p></div><div><p><i>
Starbucks Coffee Company is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, or protected veteran status, or any other characteristic protected by law.</i></p></div><div><p><i>
Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.</i><br>
<br>
<i>Starbucks Coffee Company is committed to offering reasonable accommodations to job applicants with disabilities. If you need assistance or an accommodation due to a disability, please contact us at </i><i>applicantaccommodation@starbucks.com</i><i> or 1(888) 611-2258.</i></p></div></div>

cybersecurity analyst senior - governance, risk, and compliance

Search 10000+ Cybersecurity program manager jobs near you this March. New roles added regularly across leading industries. Apply today.