Security Program Manager

OpenKyber is an information technology and talent solutions company offering talent and BI consulting to the companies in US for over 25 years. Our solutions are designed to fill resource gaps, by providing the right candidates who deliver value to the organization. Our propensity to nurture and build strong relationships with our clients helps us better understand their business demands and gives us the ability to provide services that are on time and rise above the rest. Job Title: Information Security Manager



Work Model: Remote (Project in Austin, TX)



Duration: 1 Year



Position Overview

The Information Security Manager will lead the design and implementation of comprehensive risk management governance workflows, frameworks, and scoring models for a one-year telework engagement. This role bridges business, technology, and security functions to establish robust enterprise risk tracking and long-term operational sustainability.

• Define governance workflows for risk identification, intake, review, validation, acceptance, mitigation, transfer, and ongoing monitoring.
• Establish clear roles and responsibilities for risk owners, reviewers, and governance bodies.
• Design escalation and reporting processes for high-risk and accepted risks.
• Engage key stakeholders across business, technology, security, and governance functions to validate risk requirements and workflows.
• Facilitate working sessions and workshops to socialize the risk register and governance processes.
• Support the onboarding of initial risks into the enterprise risk register.
• Produce clear, audit-ready documentation covering risk register structures, data definitions, scoring methodology, and governance decision authorities.
• Provide comprehensive knowledge transfer to designated security staff to ensure sustainability beyond the contract term.

• Enterprise Risk Register Framework: Standardized risk register template and taxonomy.
• Risk Scoring and Prioritization Model: Documented likelihood and impact scales, scoring methodology, and prioritization logic.
• Risk Governance Model: Defined workflows for risk intake, review, acceptance, and monitoring, supported by a roles and responsibilities matrix.
• Initial Risk Population: Initial set of documented risks reflecting current cybersecurity and technology risk posture.
• Final Documentation Package: Consolidated guidance and operating procedures for ongoing risk management.

For applications and inquiries, contact:View email address on us.fitly.work