Senior Security Program Manager

Our fax-delivery suite of products allows our clients to exchange millions of patient information, insurance and other documents safely, swiftly and securely every business day. Concord's use of Artificial Intelligence, analytics, and other cutting-edge technology also analyzes the data being transferred within a fax, then delivers it into the right inboxes and workflows, fundamentally changing how data moves.More than 2,300 healthcare organizations, financial providers, and companies in other equally document-intensive industries trust Concord to deliver their confidential and sensitive information. We care about our customers, and with a retention rate of more than 98%, it's clear they love the service and value we provide.We have been in business since 1996 and growing faster than ever. Our products are getting smarter, our customers are getting bigger, and our user community is exploding. To continue meeting market demand and anticipating our customers’ needs, we are expanding our offerings. That means assembling a world-class team to take us through this next phase of growth. We hope you'd like to join us!About the role
Concord is seeking a Senior Security Program Manager to bring structure, visibility, anddisciplined execution to our enterprise security program. Reporting to the CISO, this roleserves as the CISO's operational partner and leads Concord's security programmanagement office (PMO) function, acting as the connective tissue between securitystrategy and execution across Concord's distributed security functions. In this role, youwill serve as Concord's: 1) Security Program & Portfolio Lead- responsible for theplanning, coordination, and delivery of enterprise security, compliance, and customertrust initiatives across the enterprise, and 2) Security Governance & Operations Lead-establishing the governance forums, processes, metrics, and financial managementpractices that give leadership clear, credible, and timely insight into security programperformance, risk posture, and investment. This role requires strong programmanagement, facilitation, and communication skills, working knowledge of security andcompliance frameworks, and the ability to influence without direct authority in aregulated healthcare technology environment.Security Program & Cross-Functional Execution
Lead the planning, coordination, and execution of enterprise security initiatives across Concord's distributed security functions, spanning strategic security, compliance, and customer trust prioritiesOwn the integrated security roadmap and project portfolio, translating strategic objectives into sequenced milestones, workstreams, decision points, and measurable outcomesManage project intake, prioritization, and scheduling for security initiatives, as well as IT and business-owned projects with security interestsCoordinate dependencies, handoffs, and critical path activities related to security initiatives across the enterprise, working with partner functions such as Technology, Product, Engineering, Legal, Privacy, Compliance, Operations, and FinanceIdentify, track, and manage risks, issues, assumptions, and dependencies, and proactively elevate critical obstacles associated with all security-related projects and initiativesDrive accountability and execution discipline across initiative owners and delivery partners without becoming the project manager for every individual effortSecurity Governance, Change Management & Cross-Functional Visibility
Implement and lead a Security Change Advisory Board (CAB) to review, assess, and approve security-relevant changes across Concord's environmentsEstablish and facilitate security governance committees and leadership reviews, with clearly defined decision rights, escalation paths, and operating rhythmsMaintain disciplined tracking of decisions and action items to ensure security priorities are effectively assessed, communicated, and managedDevelop and maintain security metrics, KPIs/KRIs, and executive dashboards that provide actionable insight into security program performance, risk posture, compliance status, and progress against strategic initiativesPrepare EL T reporting, executive updates, and decision materials that synthesize complex program information into clear, concise narrativesSecurity Process, Documentation & Program Enablement
Lead the development, standardization, and maintenance of security processes, procedures, standards, playbooks, RACI matrices, operating models, and program documentation across Concord's distributed security functionsEstablish consistent program management methodologies, reporting practices, and delivery expectations across security functionsIdentify process gaps and drive continuous improvement initiatives that enhance consistency, accountability, scalability, operational efficiency, and overall security program maturityCross-Functional Security Planning, Budget & Operational Management
Support the CISO in the planning, coordination, and management of the security operating plan, vendor portfolio (including contracts, licensing, and renewals), resource allocation and capacity, and operational prioritiesManage the security budget lifecycle in partnership with Finance, including annual planning, forecasting, variance analysis, and spend reporting, to provide financial visibility and accountabilityCoordinate annual and quarterly planning activities and help prioritize security investments and resources based on business objectives, risk, compliance requirements, and strategic prioritiesDevelop business cases and ROI analyses to support security investment decisions and ensure spending remains aligned with approved budgets, program objectives, and organizational prioritiesRequired Qualifications
Bachelor's degree in Information T echnology, Cybersecurity, Business Administration, Project Management, or related field, or an equivalent combination of education and experience7+ years of program or project management experience, including at least 4 years supporting Information Security, IT, or technology risk initiativesExperience building or leading PMO, governance, or portfolio management functions, including steering committees, change advisory boards, or executive governance forumsWorking knowledge of cybersecurity and regulatory frameworks such as NIST CSF, NIST 800-53, ISO 27001, HIP AA, HITRUST, SOC
#J-18808-Ljbffr