What are the responsibilities and job description for the Senior Program Manager, Information Security position at Business Centric Technology?
Are you passionate about combining security strategy, hands-on technical work, and business impact? We’re seeking a Senior Program Manager – Information Security to own our client’s cybersecurity posture and help shape secure, scalable operations across the organization. This high-visibility role partners with leadership, engineering, and DevOps teams to identify risks, strengthen defenses, and drive modern security practices in a cloud-first environment.
COMP: Up to $140K plus 25% - 30% bonus
WHAT OUR CLIENT OFFERS:
- 100% paid medical, dental, and vision premiums for you and your qualifying dependents
- A 50% 401(K) match, up to the IRS maximum
- 20 days of PTO*, plus 10 paid holidays
- Family Support programs, including 8 weeks of Paid Primary Caregiver leave, adoption assistance & back-up childcare
WHAT YOU’LL DO:
- Serve as the primary hands-on security owner & executor plus support broader security & data privacy function
- Partner closely with IT Operations, Compliance, and Software Development teams, as well as cross-functional business stakeholders outside of IT
- Take ownership of information security, cybersecurity, data privacy & security controls across the organization
- Design, implement & maintain security controls, policies, standards, and procedures to mitigate evolving threats
- Identify, analyze, and respond to security vulnerabilities, threat vectors, and incidents in real time
- Lead incident response activities, including triage, investigation, containment, and remediation using logs, SIEM tools, and monitoring systems
- Monitor system activity and perform continuous evaluation of security posture and risk exposure
- Support secure application development by reviewing architectures, integrations, and DevSecOps practices
- Assist in implementing data loss prevention (DLP), privacy controls, and compliance requirements
- Administer and improve identity and access management controls using Microsoft Entra ID (Azure AD)
- Work with mature DevSecOps processes, ensuring security is embedded into CI/CD & deployment pipelines
- Document threats, vulnerabilities, and remediation strategies, and provide regular reporting to leadership
- Collaborate on physical security systems like access controls & related infrastructure (training provided)
- Participate in security system administration, monitoring, and operational support as needed
- Support training and awareness initiatives related to security best practices and DevSecOps adoption
- Transition from a hands-on individual contributor role into a future team leadership position, including people management as the function scales
WHAT YOU’LL BRING:
- Bachelor’s Degree in Computer Science, Information Security, or related field (or equivalent experience)
- 5 years of progressive experience in information security
- Strong program management and cross-functional leadership skills
- Proven experience working with cloud security, particularly within Azure environments
- Hands-on experience with Microsoft Entra ID (Azure AD)
- Solid understanding and practical application of DevSecOps principles and tooling
- Experience with security and vulnerability tools such as:
- SonarQube, Nessus, Nmap, Nexpose, Metasploit, Wireshark, GitLab, etc.
- Strong knowledge of security frameworks and standards:
- ISO 27001, NIST, SOC 2, COBIT, ITIL, PCI-DSS, SANS Top 20
APPLY TODAY! CP# 8558