InfoSec Program Manager

Job Description

Insight Global is seeking a Program Manager to join one of their Investment Banking clients in New York City. The individual will oversee leading security-focused programs — driving planning, execution, and delivery of initiatives that protect the firm's technology environment, data, and clients. The ideal candidate has hands-on experience managing Information Security programs in a regulated, enterprise environment. This is a hybrid role requiring 3 days onsite in NYC.

Key Responsibilities -Lead end-to-end program management for Information Security initiatives (e.g., identity & access management, threat detection & response, vulnerability management, cloud security, third-party risk) -Partner with the CISO organization and Technology leadership to define program scope, roadmaps, and success metrics -Build and maintain integrated program plans, budgets, and dependency maps across concurrent security workstreams -Identify, track, and mitigate program risks; escalate proactively with clear recommendations -Run governance routines (steering committees, status reporting) to keep executive stakeholders aligned -Manage vendor and managed security service provider relationships supporting program delivery -Ensure programs align with relevant regulatory/compliance requirements (SEC, FINRA, NIST CSF, ISO 27001) and support audit readiness -Translate technical security concepts into business risk language for senior leadership reporting

Skills and Requirements

-5+ years of program management experience -Financial services experience -Experience delivering large-scale programs in a complex enterprise environment -Proven ability to manage senior stakeholders and communicate across technical and executive audiences -Strong knowledge of security frameworks (NIST CSF, ISO 27001, CIS Controls) and financial services regulatory requirements -Experience in investment banking or another regulated financial services environment CISSP, CISM, or CRISC certification -Experience with third-party/vendor security risk assessments -Background supporting regulatory exams or audits related to information security -PMP, PgMP, or equivalent certification

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].