Program Manager

Required Skills & Experience

-5+ years of program management experience -Financial services experience -Experience delivering large-scale programs in a complex enterprise environment -Proven ability to manage senior stakeholders and communicate across technical and executive audiences

Nice to Have Skills & Experience

-Strong knowledge of security frameworks (NIST CSF, ISO 27001, CIS Controls) and financial services regulatory requirements -Experience in investment banking or another regulated financial services environment CISSP, CISM, or CRISC certification -Experience with third-party/vendor security risk assessments -Background supporting regulatory exams or audits related to information security -PMP, PgMP, or equivalent certification

Job Description

Insight Global is seeking a Program Manager to join one of their Investment Banking clients in New York City. The individual will oversee leading security-focused programs — driving planning, execution, and delivery of initiatives that protect the firm's technology environment, data, and clients. The ideal candidate has hands-on experience managing Information Security programs in a regulated, enterprise environment. This is a hybrid role requiring 3 days onsite in NYC. Key Responsibilities -Lead end-to-end program management for Information Security initiatives (e.g., identity & access management, threat detection & response, vulnerability management, cloud security, third-party risk) -Partner with the CISO organization and Technology leadership to define program scope, roadmaps, and success metrics -Build and maintain integrated program plans, budgets, and dependency maps across concurrent security workstreams -Identify, track, and mitigate program risks; escalate proactively with clear recommendations -Run governance routines (steering committees, status reporting) to keep executive stakeholders aligned -Manage vendor and managed security service provider relationships supporting program delivery -Ensure programs align with relevant regulatory/compliance requirements (SEC, FINRA, NIST CSF, ISO 27001) and support audit readiness -Translate technical security concepts into business risk language for senior leadership reporting