Security Program Manager

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Program Manager based in India. We are seeking an experienced cybersecurity professional to lead strategic security programs and initiatives that protect critical information assets and strengthen organizational resilience. In this role, you will oversee the planning, execution, and continuous improvement of security projects, ensuring alignment with business priorities, industry standards, and regulatory requirements. You will collaborate with IT, engineering, and business teams to identify risks, implement effective controls, and integrate security into operational processes and the software development lifecycle. Your responsibilities will span vulnerability management, incident response, security audits, compliance, and employee awareness. Through data-driven reporting and stakeholder engagement, you will communicate program progress, highlight emerging risks, and drive informed decision-making. This remote opportunity offers the chance to influence enterprise security strategy while working with diverse teams in a dynamic, technology-driven environment.

Develop and implement comprehensive security programs, strategies, and roadmaps aligned with organizational objectives, recognized security frameworks, and industry best practices. Manage the complete lifecycle of security projects, including planning, resource coordination, execution, monitoring, risk management, and reporting, ensuring delivery within agreed timelines and budgets. Lead cross-functional teams in identifying, assessing, prioritizing, and mitigating security risks across systems, applications, networks, and infrastructure. Establish, maintain, and improve security policies, standards, procedures, and controls in alignment with frameworks such as NIST, ISO 27001, and applicable regulatory requirements, including GDPR. Oversee vulnerability management, penetration testing, and security audit activities, coordinating remediation efforts and tracking progress through to resolution. Collaborate with IT, engineering, and business stakeholders to embed security requirements into the software development lifecycle (SDLC) and broader operational processes. Develop and deliver security awareness and education programs that promote secure practices and strengthen employee understanding of cybersecurity responsibilities. Maintain and improve security incident response plans, procedures, and exercises to support effective detection, response, recovery, and incident resolution. Evaluate emerging security technologies and solutions, recommending improvements that enhance organizational security capabilities and operational effectiveness. Prepare and present security metrics, program updates, risk assessments, and performance reports to senior management and relevant stakeholders. Monitor emerging cyber threats, security technologies, regulatory changes, and industry developments to identify opportunities for continuous improvement. Coordinate program priorities and manage dependencies across multiple initiatives while maintaining clear communication, accountability, and alignment with business goals. Requirements Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field; a master’s degree is preferred. At least 7 years of progressively responsible experience in information security, including a minimum of 3 years in security program management. Proven experience managing complex cybersecurity programs and projects using established project management methodologies, such as Agile or Waterfall. Strong understanding of information security principles, governance frameworks, controls, and industry best practices, including NIST, ISO 27001, and COBIT. Broad technical knowledge across application security, network security, cloud security, data protection, and identity and access management. Familiarity with regulatory and compliance requirements, including GDPR, CCPA, HIPAA, and SOX. Experience overseeing security risk assessments, vulnerability remediation, penetration testing, security audits, and incident response initiatives. Relevant professional certifications, such as Project Management Professional (PMP), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Privacy Professional/United States (CIPP/US), or equivalent credentials, are highly desirable. Excellent leadership, communication, and interpersonal skills, with the ability to influence stakeholders and collaborate effectively with both technical and non-technical teams. Strong analytical and problem-solving abilities, attention to detail, and sound judgment when assessing risks and prioritizing security initiatives. Ability to work independently, manage multiple projects and competing priorities, and adapt to changing requirements in a fast-paced environment. Strong organizational and reporting skills, including the ability to communicate technical risks, program performance, and recommendations clearly to senior leadership. Benefits Employment type: Full-time position. Location: Remote, India. Flexible working arrangements: Flexible work options designed to support work-life balance, subject to role and location requirements. Health and well-being: Access to benefits, support, and services intended to promote overall employee health and well-being. Professional development: Opportunities to expand cybersecurity expertise and contribute to enterprise-wide security initiatives. Meaningful impact: Opportunity to influence security strategy, improve organizational resilience, and strengthen risk management practices. Collaborative environment: Work alongside global teams and professionals across technology, engineering, and business functions. Autonomy and ownership: Scope to lead programs, drive improvements, and contribute to strategic decisions. Inclusive culture: A workplace that values diversity, mutual respect, equal opportunity, and merit-based development. Salary and additional benefits: Specific compensation figures, healthcare plan details, paid leave entitlements, and other benefits were not specified in the available job description.