Note: The job is a remote job and is open to candidates in USA. Hayward Holdings, Inc. is a manufacturer of residential and commercial swimming pool equipment and related solutions. The company is seeking a Senior Program Manager to lead a multi-year cybersecurity transformation initiative across Enterprise IT, Operational Technology, and Internet of Things environments. The role oversees program governance, incident and remediation efforts, vendor selection, compliance activities, executive communications, and cross-functional security initiatives.
Responsibilities
- Lead enterprise cybersecurity programs, initiatives, and strategic roadmaps that align with business objectives and organizational risk management priorities
- Establish and manage program governance, integrated plans, dependencies, decision logs, metrics, executive reporting, and escalation processes
- Coordinate security initiatives spanning infrastructure, cloud platforms, enterprise applications, identity and access management, data protection, vulnerability management, and third-party risk
- Drive the implementation and continuous improvement of security controls aligned with applicable industry standards and frameworks, such as NIST Cybersecurity Framework, ISO 27001, CIS Controls, and SOC requirements
- Provide program leadership during cybersecurity incidents by coordinating cross-functional workstreams, communications, escalations, decision-making, and recovery activities
- Lead post-incident remediation programs by translating findings into clearly owned corrective actions, milestones, dependencies, and measurable closure criteria
- Manage security findings, vulnerability remediation efforts, risk treatment plans, and audit action plans through completion and validation
- Facilitate post-incident reviews and lessons-learned sessions, identify root causes and control gaps, and drive sustainable process and technology improvements
- Prepare concise executive updates that communicate incident impact, remediation status, risks, decisions, and blockers without exposing unnecessary sensitive technical detail
- Lead full Cybersecurity Assessment Requests for Proposal (RFP), and vendor selection processes from requirements definition through recommendation and contracting
- Develop evaluation criteria, scoring models, use cases, due diligence requirements, and stakeholder review processes that support objective supplier selection
- Coordinate vendor demonstrations, reference checks, security assessments, commercial evaluations, and final recommendation packages
- Partner with Senior Leadership, IT leadership, Cybersecurity, Infrastructure, Enterprise Applications, Legal, Operations, Engineering, and other business stakeholders on contract negotiations, Statements of Work (SOWs), service-level expectations, implementation commitments, and risk provisions
- Manage strategic vendor relationships, performance, risks, issues, and delivery expectations throughout the program lifecycle
- Define program scope, objectives, success measures, deliverables, workstreams, dependencies, resources, budgets, and milestones
- Identify and mitigate delivery, operational, cybersecurity, compliance, third-party, and organizational change risks
- Provide executive-level reporting and recommendations on program health, key decisions, financial status, risks, issues, dependencies, and expected outcomes
- Facilitate alignment across business and technical teams and hold workstream owners accountable for commitments, decisions, and timely escalation
- Ensure effective change management, communications, training, operational readiness, and benefits realization are incorporated into program plans
- Coordinate program activities supporting internal audits, external audits, risk assessments, penetration tests, control reviews, and compliance assessments
- Track remediation plans related to audit findings, security assessments, policy exceptions, control gaps, and identified risks
- Partner with Legal, Compliance, Internal Audit, Privacy, and Cybersecurity teams to support applicable regulatory, contractual, and policy requirements
- Maintain clear evidence, decision records, and status documentation to support governance reviews and remediation closure
- Promote a culture of security awareness, accountability, and risk-based decision-making across the organization
Skills
- * Bachelor's degree in Information Technology, Computer Science, Information Security, Business Administration, Project Management, or a related field
- * 15+ years of experience managing complex technology programs, enterprise initiatives, or cybersecurity-related projects, including multiple interdependent workstreams
- * Proven experience leading cross-functional programs involving cybersecurity, infrastructure, cloud technologies, enterprise applications, third-party vendors, OT, and IoT
- * Demonstrated experience leading enterprise RFP processes, vendor evaluations, contract and SOW development, and strategic sourcing initiatives
- * Experience coordinating cybersecurity incident response, crisis management, vulnerability remediation, audit remediation, or risk reduction programs
- * Strong understanding of cybersecurity principles, technology risk management, security governance, control frameworks, and compliance practices
- * Experience developing executive-level communications and presenting complex technical, security, and risk topics to business leaders
- * Advanced leadership, facilitation, negotiation, conflict resolution, and stakeholder management skills
- * Proven ability to manage multiple concurrent programs, ambiguity, sensitive information, and competing priorities in a global enterprise environment
- * Working knowledge of both predictive and adaptive delivery approaches, including waterfall, agile, and hybrid program management
- Location: Remote (needs ability to travel)
- * Project Management Professional (PMP), Program Management Professional (PgMP), or comparable program management certification
- * CISSP, CISM, CRISC, Security+, or another recognized cybersecurity or technology risk certification
- * Experience with NIST Cybersecurity Framework, ISO 27001, CIS Controls, SOC reporting, and related security or control standards
- * Experience supporting internal and external audits, regulatory assessments, cyber insurance reviews, or customer security requirements
- * Experience leading global programs involving multiple business units, vendors, and geographically distributed teams
Benefits
- Remote work arrangement
Company Overview