Higher Logic

GRC Security Program Manager

Higher Logic

full-time

Posted on:

Location Type: Remote

Location: United States

Visit company website

Explore more

✨ AI Apply
Apply

Tech Stack

Cyber SecurityPMP

About the role

  • Collaborate with team members and stakeholders to understand or identify defined work problems and program goals, obtain prioritized deliverables, and discuss program impact.
  • Prioritize program goals, understand and translate other stakeholders’ needs into program goals and prioritize deliverables with minimal assistance, and contribute to decisions on prioritizing goals and deliverables.
  • Define the scope of projects and develop, execute, and/or manage project plans for supported program(s).
  • Review key metrics pertaining to a program, monitor potential metric deviations, and define corrective actions for critical deviations.
  • Implement maturity frameworks across multiple programs factoring in emerging regulations and proactive detection of risks.
  • Identify, communicate, and collaborate with relevant stakeholders within one or more teams to drive impact and work toward mutual goals.
  • Establishment of learnings, best practices, standardized frameworks and tools across programs and projects.
  • Preparation of the detailed program/project plan along with the “services of common concern.”
  • Establishment of communication modes and cadences with various stakeholders, conducting planned and ad-hoc meetings with various stakeholders to ensure project milestones are on track and to communicate latest status to them, and sharing of meeting minutes and regular updates with various stakeholders.
  • Identification of stakeholders and their roles, keeping them updated on the progress of the project, addressing their concerns, seeking, and implementing their feedback.
  • Identification of risks and detailing of mitigation plans to ensure that the projects stays on track or are brought back on track in the event of delays or blockers.
  • Assisting Sales and procurement efforts with review of contract terms and conditions related to security and risk.
  • Support business travel on an as needed basis (up to 10%).
  • Conduct all business in accordance with Higher Logic policies and procedures.
  • All other duties as assigned.

Requirements

  • A Bachelor of Science in Computer Science (or related field) or equivalent experience
  • 4+ years of experience in information security, cybersecurity, transparency reporting, integrity, and/or technology risk including one or more domains (e.g., access management, vulnerability management, change management, business continuity, application security, asset management).
  • 3+ years of experience in effectively analyzing data and programs for security risk, compliance, and maturity.
  • 2+ years program management experience in a corporate environment.
  • Experience in Jira and Drata
  • Typically requires a minimum of 5 years of related experience; or 3 years and a degree.
  • One or more information security certifications (CISSP, CISM, CISA, GIAC GSEC, OSCP, CompTIA Security+)
  • PMP certification a plus
  • Excellent oral and written communication skills
  • Experience implementing formal Risk Management methodologies preferred.
  • 3+ years of experience leading various application security audit standards, including ISO 27001/27701 and SOC II.
  • 2+ years Project Management experience.
  • Experience interacting with C-Suite leaders.
  • Exceptional verbal and written communication skills to interact with clients, auditors, and executives.
Benefits
  • Health insurance
  • 401(k) matching
  • Flexible work hours
  • Paid time off
  • Remote work options
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools
information securitycybersecuritytransparency reportingintegritytechnology riskdata analysisprogram managementrisk management methodologiesapplication security audit standardsproject management
Soft Skills
communication skillscollaborationstakeholder managementproblem-solvingprioritizationleadershipadaptabilityattention to detailfeedback implementationmeeting facilitation
Certifications
CISSPCISMCISAGIAC GSECOSCPCompTIA Security+PMP