Information Security Program Lead

About Our Opportunity

Leads the operational administration and execution of the Information Security Program, creating enterprise visibility and accountability for cybersecurity initiatives, priorities, performance, and risk reduction. Serves as the central coordination point among Information Security, Business Technology, Risk Management, Audit, Compliance, Legal, and business stakeholders to align security initiatives with organizational objectives and ensure effective delivery.

The Information Security Program Lead brings deep expertise and wide operational latitude, handling complex or ambiguous work that requires sound judgment and strong problem-solving skills. Team members at this level influence outcomes across teams, lead or support significant initiatives, and contribute to improved performance, quality, and efficiency. They demonstrate strong analytical capability, coach others, and extend their impact beyond their immediate responsibilities.

The Information Security Program Lead is designed for experienced team members who exceed role expectations and bring broad, diverse expertise to the team. Individuals in this role consistently deliver high‑quality performance while providing guidance, leadership, and support to peers.

Individuals in this role train team members while serving as a subject‑matter expert for internal partners and departments across the Association. Proactively identifies solutions, leads by positive example, and supports organizational change through influence and collaboration.

How You Will Spend Your Time

• Establishes and maintains Information Security governance, planning, and decision-making processes that enable the effective execution of the cybersecurity strategy and operational roadmap that aligns with organizational priorities and risk management objectives.
• Manages the cybersecurity project and initiative portfolio, including intake, prioritization, milestones, dependencies, resources, budgets, risks, and overall portfolio health.
• Develops and maintains cybersecurity metrics, scorecards, dashboards, and executive and Board reporting that measure control effectiveness, program performance, operational maturity, and risk reduction.
• Coordinates cross-functional security initiatives, tracking requirements and commitments across technology and business teams and escalating barriers that affect scope, schedule, resources, or outcomes.
• Facilitates Information Security planning and operating ceremonies, documenting decisions, monitoring action items, and reinforcing ownership and follow-through across the team.
• Coordinates program activities supporting regulatory requirements, audit remediation, compliance commitments, and control testing to strengthen organizational security readiness.
• Applies advanced expertise to independently manage complex, high-impact work.
• Balances risk, quality, and business priorities using advanced judgment and foresight.
• Leads or significantly contributes to initiatives that enhance processes, systems, or outcomes.
• Consults with partners across functions to provide insight, recommendations, and solutions.
• Mentors others to build technical and professional capability across the team.
• Influences outcomes beyond the immediate role through collaboration and trusted expertise.

Education & Experience

• High School Diploma/GED with 8 years relevant experience.
• Bachelor's degree with 4 years relevant experience preferred.
• Experience managing cybersecurity programs or projects preferred.
• Strong cybersecurity knowledge and business understanding preferred.
• Experience influencing without direct authority preferred.
• Strong communication and cross-functional collaboration skills preferred.
• CISSP certification or willingness to pursue preffered.

Mental & Physical Requirements

While performing the responsibilities of this role, team members typically sit for extended periods, use hands for computer and office tasks, and communicate verbally. Standing or walking may be required on a frequent basis, with occasional reaching, lifting, or moving items weighing up to ten pounds. Vision requirements include close and distance vision. The work environment generally involves a moderate noise level.

This role requires sustained mental focus, problem-solving, and the ability to manage multiple tasks, with extended computer use common. Some positions may include additional physical or mental requirements related to driving, such as holding a valid driver’s license and the ability to travel long distances.

Reasonable accommodations will be considered to enable individuals to perform the essential functions of the role.