Enter a job title or keyword
Information Security Program Manager
Job Location:
Job Location:
Manchester, CT - USA
Monthly Salary:
Not provided by the employer
Monthly Salary:
Posted:
6 September 2026 (5 hours ago)
Posted:
Application Deadline:
4 December 2026
Application Deadline:
Vacancies:
1 Vacancy
Vacancies:
Job Summary
The Information Security Program Manager (ISPM) serves as a strategic security advisor and primary governance lead for assigned ISPM is responsible for developing managing and maturing client information security programs with a strong emphasis on Cybersecurity Maturity Model Certification (CMMC) NIST compliance risk management governance policy development and assessment readiness.
This position works closely with clients technical teams Security Operations personnel external assessors and executive leadership to ensure security programs align with business objectives compliance obligations and industry best ISPM serves as a trusted advisor to client leadership and is accountable for the successful execution of security governance activities compliance initiatives risk management processes and security program outcomes.
What Youll Do
Security Program Leadership & Governance
Serve as the primary advisor and governance lead for assigned clients.
Responsibilities
CMMC Compliance & Assessment Management
Lead compliance initiatives with a focus on CMMC readiness and regulatory alignment.
Responsibilities
Risk Management & Security Advisory
Lead risk management and security improvement initiatives.
Responsibilities
Security Program Documentation & Control Management
Ensure security programs are properly documented maintained and aligned with requirements.
Responsibilities
Security Operations Support Training & Incident Management
Support and strengthen ongoing client security operations and preparedness.
Responsibilities
Your Background
Skills for Success
Mainstay Technologies- IT you trust from a team you enjoy. Mainstay Technologies provides a full IT and Information Security department to small and medium size businesses in the northern New England area. As a company in the Best Companies to Work For Hall of Fame we believe in using the power of technology and of business to help people flourish. This translates to a culture of caring high-ownership teammates who work hard enjoy each other immensely and turn off the work at the end of the workday to focus on what matters more than work.
It is our commitment to people that makes us who we are. We love what we do and we love who we do it with. We are driven by our mission: to give more than we get. People are always the ends never the addition to being a Best Company to Work For we have also been recognized for Coolest Companies for Young Professionals Best of Business for Managed IT Services and theTorch Award for Marketplace Ethics. We have made theInc.Listfor fastest growing small businesses 5 times.
Benefits
This is a full time salaried position with a full benefits package including:
We believe in Work-from-Anywhere and in the value of in-person relationships. We offer strong flexibility to work remotely while also recognizing the importance of face-to-face connection through team meetings all-staff gatherings and in-person client meetings.
We maintain a beautiful office in Manchester NH as well as a satellite office in Laconia and we encourage each team member to choose the mix of home and in-office work that best supports their wellbeing and effectiveness. While coming into the office weekly is encouraged it is not required.
Because this role includes regular in-person client meetings applicants must live within driving distance of our clients offices and team events to support client relationships onboarding and ongoing collaboration.
Application
We utilize an Applicant Tracking System for our applications. Please whitelist the following domains to ensure you receive our communications: and
This description cannot encompass all tasks and could change at any time. Other duties as assigned may be required to achieve Mainstays vision mission and core values.
This position works closely with clients technical teams Security Operations personnel external assessors and executive leadership to ensure security programs align with business objectives compliance obligations and industry best ISPM serves as a trusted advisor to client leadership and is accountable for the successful execution of security governance activities compliance initiatives risk management processes and security program outcomes.
What Youll Do
Security Program Leadership & Governance
Serve as the primary advisor and governance lead for assigned clients.
Responsibilities
- Lead client governance meetings and security program reviews.
- Develop and manage client security roadmaps and strategic initiatives.
- Provide security guidance to executive leadership and key stakeholders.
- Track program goals projects milestones and security initiatives.
- Coordinate activities between clients technical teams security operations and third-party partners.
- Present security posture compliance status risks and recommendations to client leadership.
- Drive continuous improvement of client security programs.
CMMC Compliance & Assessment Management
Lead compliance initiatives with a focus on CMMC readiness and regulatory alignment.
Responsibilities
- Serve as a subject matter expert on CMMC NIST 800-171 HIPAA and related security frameworks.
- Conduct compliance assessments gap analyses and readiness reviews.
- Interpret security regulatory and contractual requirements.
- Develop remediation plans to address compliance gaps.
- Guide clients through CMMC assessment preparation and readiness activities.
- Coordinate evidence collection assessment planning and audit support.
- Stay current on evolving compliance requirements and industry best practices.
- Provide compliance recommendations and implementation guidance.
Risk Management & Security Advisory
Lead risk management and security improvement initiatives.
Responsibilities
- Conduct security risk assessments and program reviews.
- Maintain oversight of client risk registers and remediation activities.
- Identify evaluate and prioritize business operational and security risks.
- Develop risk treatment and mitigation recommendations.
- Facilitate risk review discussions and risk acceptance decisions.
- Provide strategic recommendations to improve security maturity and resilience.
- Support vulnerability application vendor and operational risk review activities.
Security Program Documentation & Control Management
Ensure security programs are properly documented maintained and aligned with requirements.
Responsibilities
- Develop and maintain:
- System Security Plans (SSP)
- Written Information Security Programs (WISP)
- Plans of Action & Milestones (POA&M)
- Policies Procedures and Standards
- Governance and assessment documentation
- Align documentation with implemented controls and compliance requirements.
- Maintain traceability between requirements risks controls findings and remediation activities.
- Review and update documentation based on regulatory business and technology changes.
- Support standardization and continuous improvement of security program documentation.
Security Operations Support Training & Incident Management
Support and strengthen ongoing client security operations and preparedness.
Responsibilities
- Lead security awareness and compliance training initiatives.
- Facilitate tabletop exercises and security program testing.
- Oversee incident response planning and program readiness.
- Participate in significant security incidents as an advisor and coordinator.
- Conduct post-incident reviews and lessons-learned activities.
- Ensure incidents findings and corrective actions are incorporated into risk management and governance processes.
- Support application security reviews vendor risk reviews and continuous monitoring initiatives.
- Promote security best practices across client organizations.
Your Background
- Experience supporting CMMC readiness initiatives.
- Experience assisting clients through audits or certification assessments.
- Experience in consulting or managed services environments.
- Experience presenting to executive leadership teams.
- Preferred Certifications
- CISA
- CISM
- CMMC Certified Professional (CCP)
- CISSP
Skills for Success
- Creative problem-solving skills with the ability to take multiple components and pull them together into recommendations
- Strong decision-making skills and comfortable in situations where there is no right answer
- Strong organization and project management skills
- Business acumen- understanding business process data flows and system application use in a variety of business settings
- Technical aptitude- the ability to understand technical concepts tools and the IT landscape
- Strong written and oral communication skills with the ability to coordinate and run successful meetings
- Life-long learner with a growth mindset that enjoys the pursuit of knowledge and is eager to stay updated in security policies and skill
- Prolonged periods of sitting at a desk and working on a computer.
- Must be able to lift 15 pounds at times.
- Travel between offices and to client sites
Mainstay Technologies- IT you trust from a team you enjoy. Mainstay Technologies provides a full IT and Information Security department to small and medium size businesses in the northern New England area. As a company in the Best Companies to Work For Hall of Fame we believe in using the power of technology and of business to help people flourish. This translates to a culture of caring high-ownership teammates who work hard enjoy each other immensely and turn off the work at the end of the workday to focus on what matters more than work.
It is our commitment to people that makes us who we are. We love what we do and we love who we do it with. We are driven by our mission: to give more than we get. People are always the ends never the addition to being a Best Company to Work For we have also been recognized for Coolest Companies for Young Professionals Best of Business for Managed IT Services and theTorch Award for Marketplace Ethics. We have made theInc.Listfor fastest growing small businesses 5 times.
Benefits
This is a full time salaried position with a full benefits package including:
- A flexible and fun work environment with events lunch learns ping pong snacks games and books
- 3 weeks of PTO (4 weeks after 2 years) per year
- A 2-week sabbatical at 5 years and a 5-week sabbatical at 10 years
- Health Dental and Vision Insurance
- Disability Insurance
- Group and Supplemental Life Insurance
- Paid Family Leave
- 401(k) with 3% match
- ESOP!
- Team Profit Sharing
- Training program (including paid certifications tuition reimbursement and bonuses on achieving certs)
- Paid Volunteer Time Off
We believe in Work-from-Anywhere and in the value of in-person relationships. We offer strong flexibility to work remotely while also recognizing the importance of face-to-face connection through team meetings all-staff gatherings and in-person client meetings.
We maintain a beautiful office in Manchester NH as well as a satellite office in Laconia and we encourage each team member to choose the mix of home and in-office work that best supports their wellbeing and effectiveness. While coming into the office weekly is encouraged it is not required.
Because this role includes regular in-person client meetings applicants must live within driving distance of our clients offices and team events to support client relationships onboarding and ongoing collaboration.
Application
We utilize an Applicant Tracking System for our applications. Please whitelist the following domains to ensure you receive our communications: and
This description cannot encompass all tasks and could change at any time. Other duties as assigned may be required to achieve Mainstays vision mission and core values.
Required Experience:
Senior IC
About Company
At Mainstay Technologies, we provide outsourced IT and information security services to New Hampshire, Massachusetts, and Greater Boston.
