Cybersecurity Program Manager

About the role

Apogee Global RMS is expanding its cybersecurity and enterprise-risk practice and is looking for a Cybersecurity Program Manager to lead, coordinate and mature client-facing security programs. The role sits at the intersection of cybersecurity operations, risk management, governance and executive-level communication, and suits a structured, strategic and highly organized practitioner in fast-moving advisory environments. It is a contract position based in San Jose.

Key responsibilities

• Lead and manage cybersecurity programs across governance, risk, compliance and operations
• Coordinate cross-functional teams, security stakeholders and external partners
• Develop and maintain program roadmaps, timelines and reporting dashboards
• Support policy development, security controls and compliance documentation
• Track progress against security initiatives, SLAs and regulatory requirements
• Facilitate meetings, status reviews and executive-level briefings
• Identify gaps, risks and dependencies across cybersecurity workflows
• Support incident-response coordination and post-incident program updates
• Align programs with frameworks such as NIST CSF, ISO 27001, CIS and enterprise risk standards

Required profile

• 3-7+ years of experience in cybersecurity program management, GRC or security operations
• Experience managing cross-functional security initiatives or enterprise programs
• Excellent communication skills, able to explain technical concepts to leadership
• Strong organizational discipline, documentation skills and attention to detail
• Able to manage multiple priorities in a remote, fast-paced environment
• Familiarity with risk management, compliance or incident-response processes

Required skills

• Strong understanding of cybersecurity frameworks (NIST, ISO, CIS, SOC2)
• Certifications such as PMP, CISSP, CISM, CGRC are a plus