Senior Program Manager, Information Security / DR / BCP (Remote - USA)

Lantern is seeking a Senior Program Manager (TPM) with in-depth expertise in Information Security, governance, and program management to drive the execution of critical Information Security and Infrastructure initiatives. This role is responsible for driving and coordinating security initiatives, ensuring projects are delivered on time, within scope, and in alignment with compliance/business/enterprise goals.

The ideal candidate has a strong PMO background working in a PMO organization, proven ability to manage complex security portfolios, and hands-on knowledge of governance, risk, and compliance frameworks. You will partner closely with IT, Legal, Product, Security, and Infrastructure teams to establish governance structures, manage capacity planning, and deliver projects that strengthen the organization’s technical and operational readiness.

Location: Remote, USA

Responsibilities and Duties:

Portfolio & Program Management (PMO)

• Implement and scale a unified portfolio management framework to prioritize and deliver InfoSec and Infrastructure initiatives aligned with enterprise goals.
• Manage intake and prioritization processes, ensuring smooth execution and onboarding of new hires into meaningful project work.
• Deliver 90%+ on-time, in-scope project execution across security and infrastructure portfolios. Manage timelines and deliverables for frameworks such as SOC, HIPAA, and GDPR.
• Conduct quarterly portfolio reviews, connecting project outcomes, hiring efficiency, and resource utilization to business objectives.

Capacity Planning & Resource Management

• Drive workforce and hiring alignment with portfolio needs.
• Optimize resource allocation and track utilization to maximize program efficiency.

Governance & Security Oversight

• Establish and track KPI (e.g., time to restore service, vulnerability remediation SLAs, phishing resilience, audit readiness, etc.) and KRI (e.g., risk exposure, compliance gaps) to measure operational readiness.
• Lead and manage assessments across:
• Physical Security
• Microsoft Security (Active Directory, Entra, M365)
• Cybersecurity (NIST CSF 2.0)
• HITRUST remediation initiatives
• Oversee adoption of tools and frameworks for incident, risk, and policy management (e.g. OneTrust).

Security & Technical Execution

• Oversee delivery of security initiatives, including:
• MDR tool implementation (Expel)
• Penetration Testing programs
• Data Loss Prevention tools
• Identity Access Management rollouts
• SOP updates and PagerDuty integration
• Disaster Recovery (DR) and Business Continuity Planning (BCP) Expertise
• Ability to develop and maintain DR/BCP policies, procedures, and runbooks
• Familiar with NIST
• Experience conducting BIA and Risk Assessment to identify critical processes and dependencies
• Knowledge of recovery time objectives (RTO), recovery point objectives (RPO), and tiered recovery strategies for different systems
• Leading Tabletop exercises, simulation testing, and complete failover tests for DR and continuity validation
• Assessing 3rd party vendor and partner DR/BCP capabilities as part of risk management
• Risk Management: Work with security engineers to identify, evaluate, and mitigate risks, balancing business needs with security requirements. Lead compliance and risk initiatives, including:
• OneTrust deployment for Incident Management, IT & Security Risk Management, 3rd-Party Risk, and Policy Management
• Questionnaire response automation and SOC audit support

Qualifications:

• 5+ years of program/project management experience within Information Security, IT, or Infrastructure domains.
• Proven experience in security governance, compliance, and risk management frameworks (e.g., NIST CSF, HITRUST, SOC).
• Strong knowledge of security tool implementation (MDR, IAM, DLP, OneTrust).
• Jira knowledge.
• Experience leading portfolio-level program management, including intake, prioritization, and capacity planning.
• Track record of delivering large-scale projects with high on-time and in-scope success rates.
• Excellent communication, stakeholder management, and executive reporting skills.
• Must demonstrate flexibility and excellent organizational skills with the ability to complete various tasks accurately with high attention to detail and creativity.
• Develop, manage, and maintain customer relationships at all organizational levels.
• Excellent soft skills to handle stress and resolve conflicts.
• Ability to maintain confidentiality.
• Be Proactive, Self-Driven, Fast-Learner, and Accountable.

Preferred Skills:

• Familiarity with cloud security.
• Strong analytical ability to connect project outcomes to business performance metrics.
• PMP, CISSP, CISM, CISA, or related certifications (preferred but not required).

Benefits