Security Program Manager bei BrainRocket

The Security Program Manager is responsible for driving the planning, coordination, and execution of security initiatives and projects across the organization. This role ensures alignment between security objectives and business goals, manages cross-functional security projects, and establishes governance to reduce risk and maintain compliance. Acting as the central point of coordination, the Security Program Manager enables efficient execution and delivery of security projects into production, facilitates communication between stakeholders, and ensures security becomes an integral part of business processes.

✅ Requirements:
Must-Have:
✔️ 5+ years of experience in security program / project management or related fields. 
✔️ Strong understanding of information security principles, frameworks (e.g., ISO 27001, NIST, SOC 2) and risk management. 
✔️ Proven track record of delivering cross-functional security initiatives from planning to production. 
✔️ Excellent stakeholder management, communication, and presentation skills, including C-level reporting. 
✔️ Ability to build governance processes, track KPIs, and ensure accountability across teams. 
✔️ Strong organizational and prioritization skills in a fast-paced environment. 
✔️ Fluency in English (written and spoken). 

Nice-to-Have: 
✔️ Technical background in IT, cloud, or application security. 
✔️ Experience working with GRC (Governance, Risk, and Compliance) tools. 
✔️ Familiarity with DevSecOps practices and CI/CD integration. 
✔️ Certifications such as CISSP, CISM, PMP, or similar. 
✔️ Experience in regulated industries (finance, gaming, healthcare, etc.). 
✔️ Previous experience in international or distributed teams. 

✅ Responsibilities:
✔️ Program ownership: Lead the planning, execution, and successful delivery of security initiatives and projects, ensuring they reach production and deliver measurable business value.
✔️ Alignment with business goals: Translate security objectives into actionable programs aligned with organizational strategy and regulatory requirements. 
✔️ Cross-functional coordination: Act as the primary point of contact between Security, IT, Product, Engineering, Legal, HR, and other business units to ensure seamless collaboration. 
✔️ Governance & reporting: Establish clear governance models, track progress against milestones, define KPIs/metrics, and regularly report status and risks to senior management.
✔️ Risk management: Identify, assess, and prioritize security risks; drive mitigation plans and ensure timely escalation of critical issues.
✔️ Policy & compliance enablement: Ensure projects support compliance with relevant standards (e.g., ISO 27001, SOC 2, GDPR) and internal policies.
✔️ Change management: Develop rollout strategies for new security controls, ensuring adoption across the organization and minimal disruption to business processes.
✔️ Stakeholder communication: Facilitate clear, timely, and transparent communication with all levels of stakeholders, including C-level executives.
✔️ Issue resolution: Anticipate roadblocks, proactively manage dependencies, and resolve conflicts to keep projects on track. 
✔️ Continuous improvement: Identify inefficiencies in existing security processes and propose improvements, frameworks, or automation to enhance scalability. 
✔️ Awareness & training support: Coordinate security awareness initiatives and ensure that program outcomes are embedded into employee practices. 
✔️ Budget & resource planning: Collaborate with leadership to estimate costs, allocate resources, and optimize delivery efficiency. 
✔️ Vendor & third-party coordination: Manage external security partners, consultants, or vendors when projects involve outsourced services. 
✔️ Documentation: Maintain up-to-date documentation of project scope, timelines, ownership, and deliverables for auditability and knowledge transfer. 

✅ We offer excellent benefits, including but not limited to:
🧑🏻‍💻 Learning and development opportunities and interesting, challenging tasks. 
📚 Opportunity to develop language skills, with partial compensation for the cost of Spanish classes (for localisation purposes). 
✈️ Relocation package (tickets, staying in a hotel for up to 2 weeks, and visa relocation support for our employees and their family members). 
🏥 Global coverage health insurance. 
🏝 Time for proper rest, with 23 working days of annual vacation and additional paid sick days. 
📈 Competitive remuneration level with annual review. 
🤝 Teambuilding activities.