{"id":3339023,"url":"https://alion.io/job/harris-computer-information-security-program-manager","title":"Information Security Program Manager","company":{"id":2223,"name":"Harris Computer","domain":"harriscomputer.com","url":"https://alion.io/company/harris-computer","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":79,"open_postings":37,"ghost_share":0,"stale_share":0.838,"repost_share":0,"time_to_fill_p50_days":31,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States","Canada"],"countries":["US","CA"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":105000,"max":120000,"currency":"USD","period":"year","gross":null,"usd_annual":120000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"CMMC","optional":false},{"name":"HIPAA","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-27T14:52:12Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-11-03T02:55:47Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"WHAT YOU WILL DO\nSecurity Program Leadership & Operations\nDevelops and implements client information security programs that meet business, regulatory, and industry requirements\nAdvises executive leadership on information security strategy, policies, standards, and procedures\nUpdates client executives on security plan progress, emerging threats, and actual or potential security incidents\nDevelops and maintains security policies and procedures that govern the protection of the confidentiality, integrity, and availability of client systems and data\nMonitors client security programs and environment changes to keep controls effective and risks minimized\nOversees implementation of security solutions to improve overall security posture\nDevelops, maintains, and coordinates testing of disaster recovery and business continuity plans that reflect client system and facility needs\nDevelops, delivers, and monitors security awareness training programs\nWorks within cross-functional teams to develop and deliver secure solutions\nLeads or participates in client steering committees and working groups as needed\nCoordinates with client security teams on incident detection, response, and resolution within agreed service-level agreements (SLAs)\nRisk & Compliance Support\nLeads internal, vulnerability, and third-party risk assessments and supports client security audits\nConducts security reviews of new and existing systems and recommends improvements to systems, policies, and procedures\nEnsures appropriate administrative, technical, and physical safeguards protect client systems and information\nAdvises clients on control requirements for NIST CSF, ISO/IEC 27001/27002, HIPAA, SOC 2, PCI DSS, and other applicable frameworks and regulations\nAssesses control gaps and maturity against applicable frameworks and helps clients prioritize remediation\nSupports client audits, assessments, and certifications by clarifying controls, coordinating evidence, and addressing findings\nDefines scope and maintains segmentation and protection controls for regulated data environments (e.g., ePHI, cardholder data, CUI)\nOversees vulnerability scanning and penetration testing programs aligned with framework and regulatory requirements\nMaintains cross-framework control mappings and supports compensating-control and risk-acceptance documentation\nWHAT MAKES YOU STAND OUT\nCommunication Proficiency\nDecision Making\nProject Management\nTeamwork Orientation\nThoroughness\nClient Relationship Management\nRegulatory Compliance Expertise\nWHAT ARE WE LOOKING FOR\nInformation Security Experience\nNote: The required qualifications may be satisfied through a combination of the experience areas listed below.\nAt least five years of information security leadership experience, such as CISO, vCISO, or senior security leadership\nAt least three years of experience in security operations, security engineering, vulnerability management, or system administration\nConsulting or managed services experience supporting multiple clients across regulated industries (e.g., healthcare, financial services, government contracting)\nCompliance & Regulatory Experience\nAt least three years of hands-on experience implementing and operating controls for frameworks such as NIST, ISO/IEC 27001, HIPAA, SOC 2, or PCI DSS\nExperience serving as the security point of contact during external audits and assessments (e.g., ISO/IEC 27001, SOC 2, PCI DSS, HIPAA)\nExperience scoping regulated systems and data, identifying required controls, and reducing scope through data classification and network segmentation\nKnowledge of risk management frameworks and methodologies (e.g., NIST RMF, NIST SP 800-30, ISO/IEC 27005, ISO 31000, and FAIR), with experience applying them to risk assessment, treatment, and reporting\nExperience with data protection technologies (encryption, tokenization, data loss prevention, secure coding)\nRequired Training and Education\nBachelor's degree in Computer Science, Information Systems, Network Security Engineering, or a related field, or equivalent work experience\nRequired Certifications\nMust Have\nCISSP (Certified Information Systems Security Professional)\nHighly Preferred\nCISM (Certified Information Security Manager)\nCCSP (Certified Cloud Security Professional)\nCGRC (Certified in Governance, Risk and Compliance)\nFramework-specific credentials such as PCI ISA, HCISPP (HealthCare Information Security and Privacy Practitioner), or CMMC Certified Professional (CCP)\nAdditional Preferred\nCRISC (Certified in Risk and Information Systems Control)\nCISA (Certified Information Systems Auditor)\nCIPT (Certified Information Privacy Technologist)\nCOMPENSATION DETAILS\nThe potential salary range for this role is $105,000 to $120,000 per year, with eligibility for bonus or merit program. Final compensation will be based on experience, skills, market conditions, and internal equity. We offer a competitive Total Rewards program including health benefits, RRSP matching, stock option, and career development opportunities.\nThis description does not include every duty or responsibility. Role requirements may change based on client needs and service agreements.","description_format":"text","description_chars":5143,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Billing & Subscription Management","Digital Government","EHR & Clinical Software"],"lifecycle":[{"event":"open","at":"2026-10-27T14:52:12Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":6,"expected_fill_days":31,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":{"stated_usd_annual":120000,"is_top_pay":false},"html_url":"https://alion.io/job/harris-computer-information-security-program-manager","json_url":"https://alion.io/job/harris-computer-information-security-program-manager.json","meta":{"generated_at":"2026-11-03T13:58:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19552,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2223},"rest":"https://alion.io/mcp/rest/get_company?id=2223"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fharris-computer-information-security-program-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fharris-computer-information-security-program-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fharris-computer-information-security-program-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/harris-computer-information-security-program-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fharris-computer-information-security-program-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3339023}},{"tool":"search_jobs","arguments":{"company":"harriscomputer.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3339023},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}