Cybersecurity Program Manager (Cybersecurity Transformation)

Location: Madison, Wisconsin, United States

Company

hirify.global is partnering with an insurance industry organization on a cybersecurity transformation program in a federally regulated healthcare environment.

What you will do

• Own program management for a multi-workstream cybersecurity transformation portfolio, including planning, sequencing, dependencies, milestones, and critical path management.
• Build and maintain a multi-year roadmap, integrated program plan, program charter, resource model, and remediation register.
• Translate cybersecurity assessment findings into prioritized, owned, dependency-mapped remediation initiatives aligned with NIST Cybersecurity Framework, NIST SP 800-53, and Section 912 control areas.
• Design and operate metrics, Key Risk Indicator, and reporting frameworks using repeatable live-data collection cycles.
• Produce executive, leadership, Audit Committee, and board-grade transformation reporting.
• Coordinate Enterprise Cyber Resilience functions, establish sustainable governance, and transition the program to the internal Project Management Office.

Requirements

• At least 8 years of program or project management experience, including 5 or more years managing cybersecurity programs.
• Ownership of a cybersecurity transformation or security maturity improvement program from assessment findings and roadmap development through execution.
• Working fluency in the NIST Cybersecurity Framework and NIST SP 800-53, with the ability to interpret security control findings independently.
• Experience in FISMA, HIPAA, federal healthcare, or similarly regulated security environments subject to external audits and assessments.
• Experience building cybersecurity metrics and KRI frameworks, producing senior-level reporting, and managing governance, risks, dependencies, critical paths, and change control.
• Strong communication, stakeholder management, negotiation, and transformation leadership skills across technical, business, executive, and compliance audiences.

Nice to have

• Experience supporting a Medicare Administrative Contractor, federal healthcare contractor, or another FISMA-regulated organization.
• Familiarity with CMS information security requirements, the MMA Section 912 evaluation process, and CMMC.
• CISSP, CISM, CRISC, PMP, CSM, SAFe, LeSS, PgMP, or PfMP certification.
• Experience with Agile and scaled delivery frameworks.

Culture & Benefits

• Work on a complex cybersecurity transformation within a federally regulated healthcare environment.
• Coordinate across cyber risk and assurance, compliance, architecture, business enablement, and threat management functions.
• Establish practical governance and operating discipline without unnecessary administrative burden.
• Support evidence-based staffing, budget decisions, risk reduction, and long-term program sustainability.