Security Program Manager

Overview

Lead and manage security initiatives and projects for Hitachi Vantara LLC, developing and overseeing security programs that protect information assets, ensure regulatory compliance, and drive continuous improvement in the security posture.

What you'll do

• Develop and implement comprehensive security programs, strategies, and roadmaps aligned with business objectives and industry best practices.
• Manage the full lifecycle of security projects, including planning, execution, monitoring, and reporting, ensuring projects are delivered on time and within budget.
• Lead cross-functional teams to identify, assess, and mitigate security risks across systems, applications, and infrastructure.
• Establish and maintain security policies, standards, and procedures, ensuring adherence to regulatory frameworks such as NIST, ISO 27001, GDPR, and other relevant compliance mandates.
• Oversee vulnerability management, penetration testing, and security audit processes, driving remediation efforts and tracking progress.
• Collaborate with IT, engineering, and business units to integrate security requirements into the software development lifecycle (SDLC) and other operational processes.
• Develop and deliver security awareness training and education programs for employees across the organization.
• Manage security incident response plans, procedures, and exercises, ensuring effective and timely resolution of security incidents.
• Evaluate and recommend security technologies and solutions to enhance the organization's security capabilities.
• Prepare and present security reports, metrics, and program updates to senior management and stakeholders.
• Stay current with emerging security threats, technologies, and industry trends to continuously improve the security posture.

What you'll need

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 7+ years of progressive experience in information security, with at least 3 years in a security program management role.
• Proven experience in managing complex security programs and projects, utilizing project management methodologies (e.g., Agile, Waterfall).
• Strong understanding of information security principles, frameworks, and best practices (e.g., NIST, ISO 27001, COBIT).
• In-depth knowledge of security domains, including application security, network security, cloud security, data protection, and identity and access management.
• Familiarity with regulatory compliance requirements (e.g., GDPR, CCPA, HIPAA, SOX).
• Excellent communication, interpersonal, and leadership skills with the ability to influence and collaborate effectively with technical and non-technical stakeholders.
• Strong analytical and problem-solving abilities, with a keen eye for detail.
• Ability to work independently and manage multiple priorities in a fast-paced environment.

Nice to have

• Master's degree.
• Certifications such as PMP, CISSP, CISM, CIPP/US, or equivalent.

Details

• Location: Remote, India.