What are the responsibilities and job description for the Senior Program Manager, Information Security position at Jobs via Dice?
Dice is the leading career destination for tech experts at every stage of their careers. Our client, Business Centric Technology, is seeking the following. Apply via Dice today!
Are you passionate about combining security strategy, hands-on technical work, and business impact? We’re seeking a Senior Program Manager – Information Security to own our client’s cybersecurity posture and help shape secure, scalable operations across the organization. This high-visibility role partners with leadership, engineering, and DevOps teams to identify risks, strengthen defenses, and drive modern security practices in a cloud-first environment.
COMP: Up to $140K plus 25% - 30% bonus
WHAT OUR CLIENT OFFERS:
Are you passionate about combining security strategy, hands-on technical work, and business impact? We’re seeking a Senior Program Manager – Information Security to own our client’s cybersecurity posture and help shape secure, scalable operations across the organization. This high-visibility role partners with leadership, engineering, and DevOps teams to identify risks, strengthen defenses, and drive modern security practices in a cloud-first environment.
COMP: Up to $140K plus 25% - 30% bonus
WHAT OUR CLIENT OFFERS:
- 100% paid medical, dental, and vision premiums for you and your qualifying dependents
- A 50% 401(K) match, up to the IRS maximum
- 20 days of PTO*, plus 10 paid holidays
- Family Support programs, including 8 weeks of Paid Primary Caregiver leave, adoption assistance & back-up childcare
- Serve as the primary hands-on security owner & executor plus support broader security & data privacy function
- Partner closely with IT Operations, Compliance, and Software Development teams, as well as cross-functional business stakeholders outside of IT
- Take ownership of information security, cybersecurity, data privacy & security controls across the organization
- Design, implement & maintain security controls, policies, standards, and procedures to mitigate evolving threats
- Identify, analyze, and respond to security vulnerabilities, threat vectors, and incidents in real time
- Lead incident response activities, including triage, investigation, containment, and remediation using logs, SIEM tools, and monitoring systems
- Monitor system activity and perform continuous evaluation of security posture and risk exposure
- Support secure application development by reviewing architectures, integrations, and DevSecOps practices
- Assist in implementing data loss prevention (DLP), privacy controls, and compliance requirements
- Administer and improve identity and access management controls using Microsoft Entra ID (Azure AD)
- Work with mature DevSecOps processes, ensuring security is embedded into CI/CD & deployment pipelines
- Document threats, vulnerabilities, and remediation strategies, and provide regular reporting to leadership
- Collaborate on physical security systems like access controls & related infrastructure (training provided)
- Participate in security system administration, monitoring, and operational support as needed
- Support training and awareness initiatives related to security best practices and DevSecOps adoption
- Transition from a hands-on individual contributor role into a future team leadership position, including people management as the function scales
- Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience)
- 5 years of progressive experience in information security
- Strong program management and cross-functional leadership skills
- Proven experience working with cloud security, particularly within Azure environments
- Hands-on experience with Microsoft Entra ID (Azure AD)
- Solid understanding and practical application of DevSecOps principles and tooling
- Experience with security and vulnerability tools such as:
- SonarQube, Nessus, Nmap, Nexpose, Metasploit, Wireshark, GitLab, etc.
- Strong knowledge of security frameworks and standards:
- ISO 27001, NIST, SOC 2, COBIT, ITIL, PCI-DSS, SANS Top 20