Cybersecurity Program Manager

First Hawaiian Bank is currently seeking a Cybersecurity Program Manager to join the team in our Cybersecurity Division.

Work Schedule:

Monday - Friday 8:00AM - 5:00PM (hours may vary)

Compensation:

The pay range for the role is $110,000 - $140,000/yr; commensurate with experience.

The Cybersecurity Program Manager is responsible for managing compliance, Security Awareness & Training, governance, financial/budget activity, project management tracking/reporting for the Cybersecurity Division. This role also supports the CISO in planning and governing the delivery of the Bank’s cybersecurity strategy and objectives. This includes maintaining tracking and analysis of core Cybersecurity Division activities across Identity Access Management (IAM) and Cyber Operations, & Security Architecture and creating and updating RACI role matrix for responsibilities across Cybersecurity and IT to ensure clear accountability and responsibility for tasks. This role is also responsible for maintaining all analytics and metrics related to work across the cybersecurity program and ensuring that committee and internal reports are prepared for review by the CISO, organizing/preparing responses to audit, maintaining compliance program for the division, acting as liaison to second line risk counterparts on behalf of Cybersecurity Division, and supporting team readiness for regulatory reviews. This position leads and is responsible for delivery of the Cybersecurity Division Annual Control Maturity Assessment, developing and leading the Cyber Risk Quantification Program (CRQ), and works in collaboration with the CISO to prepare strategic updates on cybersecurity for senior executives.

• Bachelor’s degree in Cybersecurity, IT-related field, Business Management, or equivalent experience such as:
• Five (5) years of cyber project management related experience working on complex cybersecurity projects; and
• Five (5) years of experience with cybersecurity or IT reporting, oversight, and supporting program management, risk management, compliance and/or governance required.
• Five (5) years of progressive experience in cybersecurity, information security, IT governance, risk management, compliance, audit, program management, or a related field required.
• Five (5) years of experience managing enterprise-level programs, governance processes, or strategic initiatives inclusive of the following:
  • Experience developing executive-level reporting, metrics, dashboards, and presentations.
  • Experience supporting audits, regulatory examinations, risk assessments, or compliance programs.
  • Experience managing projects and coordinating activities across multiple stakeholders and business functions.
  • Experience tracking budgets, forecasts, expenses, or financial reporting for technology or business programs.
    *Required experience may be obtained concurrently.
    
• Master's degree in Cybersecurity, Information Security, Business Administration (MBA), Risk Management, or related field preferred.
• Ten (10) + years of experience in cybersecurity, information security, governance, risk, or compliance functions preferred.
• Experience in a technical field, such as cybersecurity, project management, management information systems, program structure or development, business analytics, requirements definition, or similar work preferred.
• Experience within banking, financial services, or other highly regulated industries preferred.
• Experience planning, preparing, coordinating and/or delivering training to users of information management systems preferred.
• Experience in innovation and leadership to grow and expand current programs preferred.
• Experience with cyber risk quantification methodologies and control frameworks preferred (e.g., NIST CSF 2.0)
• Strong analytical, critical thinking, and problem-solving skills with the ability to assess complex issues and recommend practical solutions.
• Excellent planning, organizational, and project management skills with the ability to manage multiple priorities and deadlines.
• Advanced proficiency in Microsoft 365 applications, including Excel, PowerPoint, Word, and collaboration tools.
• Strong written, verbal, presentation, and interpersonal communication skills, with the ability to effectively communicate with technical and non-technical audiences.
• Ability to develop executive-level reports, dashboards, metrics, and presentations that support strategic decision-making.
• Proven ability to build collaborative relationships and partner effectively with business, technology, risk, compliance, audit, and vendor stakeholders.
• Skilled in facilitating meetings, governance forums, and cross-functional discussions to drive results.
• Ability to exercise sound judgment, maintain confidentiality, and handle sensitive information with professionalism and discretion.
• Strong attention to detail, accountability, and follow-through.
• Demonstrated ability to work effectively in a fast-paced, evolving environment with changing priorities and competing demands.
• Strong time management, stakeholder management, negotiation, and influencing skills.
• Demonstrated track record of delivering high-quality results and driving continuous improvement.