Information Security Program Manager (Cybersecurity)

Location: Florida, United States

Salary: $105,000–$120,000 per year, with eligibility for a bonus or merit program.

Company

hirify.global provides software and client-focused technology services.

What you will do

• Develop and operate client information security programs, policies, procedures, and security solutions aligned with business, regulatory, and industry requirements.
• Advise executive leadership and clients on security strategy, standards, emerging threats, incidents, control requirements, and remediation priorities.
• Coordinate incident detection, response, and resolution with client security teams within agreed SLAs.
• Lead risk assessments, security reviews, vulnerability scanning, penetration testing, audits, assessments, and certification activities.
• Develop and test disaster recovery and business continuity plans, security awareness programs, and controls for regulated data environments.
• Work with cross-functional teams, steering committees, and working groups to deliver secure solutions and maintain effective controls.

Requirements

• At least five years of information security leadership experience, such as CISO, vCISO, or senior security leadership, plus at least three years in security operations, security engineering, vulnerability management, or system administration.
• Consulting or managed services experience supporting multiple clients across regulated industries, including healthcare, financial services, or government contracting.
• At least three years of hands-on experience implementing and operating controls for NIST, ISO/IEC 27001, HIPAA, SOC 2, or PCI DSS.
• Experience serving as the security point of contact during external audits and assessments.
• Experience scoping regulated systems and data, identifying required controls, and reducing scope through data classification and network segmentation.
• Knowledge of risk management frameworks and methodologies including NIST RMF, NIST SP 800-30, ISO/IEC 27005, ISO 31000, and FAIR, with experience applying them to risk assessment, treatment, and reporting.
• Experience with data protection technologies including encryption, tokenization, data loss prevention, and secure coding.
• Bachelor’s degree in Computer Science, Information Systems, Network Security Engineering, or a related field, or equivalent work experience.
• CISSP certification is required.

Nice to have

• CISM, CCSP, CGRC, PCI ISA, HCISPP, or CMMC Certified Professional credentials.
• CRISC, CISA, or CIPT certifications.
• Strong communication, decision-making, project management, teamwork, thoroughness, client relationship management, and regulatory compliance expertise.

Culture & Benefits

• Full-time position with health benefits, RRSP matching, stock options, and career development opportunities.
• Compensation may include a bonus or merit program and is based on experience, skills, market conditions, and internal equity.
• Responsibilities may change according to client needs and service agreements.