Sr Staff Program Manager, Information Security

About our group:

The Information Security organization is responsible for protecting Seagate's global technology environment and enabling secure, resilient business operations. Within Information Security, Governance & Risk Management establishes the planning, risk, governance, and management disciplines that help translate cybersecurity priorities into coordinated and measurable execution aligned to the NIST Cybersecurity Framework.

The team works across Information Security, IT, business functions, and external partners to provide consistent governance, visibility, and accountability for cybersecurity initiatives and outcomes.

About the role - you will:

The Program Manager, Information Security supports the planning, governance, reporting, and execution discipline for the Information Security portfolio. The role helps provide clear visibility into priorities, milestones, dependencies, risks, decisions, and outcomes so security leaders can manage initiatives with consistency and accountability.

This role requires project management experience in a cybersecurity or Information Security environment, with enough security context to understand program risks, dependencies, controls, and stakeholder needs while working closely with technical security teams.

• Manage Information Security projects and programs from planning through execution and closure, ensuring clear scope, ownership, milestones, dependencies, risks, and measurable outcomes.
• Establish consistent portfolio governance and project-management practices across Information Security initiatives.
• Partner with security leaders to translate Information Security priorities into executable plans and maintain an integrated portfolio roadmap.
• Facilitate portfolio reviews, operating reviews, project governance forums, and cross-functional working sessions; drive decisions, actions, and follow-through.
• Identify delivery risks, resource constraints, cross-project dependencies, and competing priorities; escalate issues when leadership decisions or trade-offs are required.
• Develop and maintain Information Security dashboards, KPIs, KRIs, project health indicators, RAID logs, decision logs, and portfolio reporting.
• Consolidate information from security teams into concise executive-level reporting that highlights progress, outcomes, risks, trends, trade-offs, and decisions required, while keeping technical delivery accountability with the responsible security teams.
• Support portfolio intake, planning, prioritization, budgeting, forecasting, and resource-planning activities for the Information Security portfolio.
• Coordinate major initiatives involving Information Security, IT, business functions, vendors, and managed service providers.
• Drive continuous improvement in project governance, reporting, operating cadence, and automation to improve execution discipline and reduce administrative overhead.
• This is an individual contributor role and does not have people management responsibilities.

About you:

The right individual for this role is organized, analytical, and execution-oriented, with the ability to bring structure to complex technical initiatives and drive accountability across teams without direct authority. You are comfortable working with cybersecurity leaders and technical teams while translating detailed program information into clear, concise communication for senior leadership.

• You focus on outcomes, accountability, and measurable progress rather than activity alone.
• You can work across multiple initiatives and stakeholders while maintaining a clear view of priorities and dependencies.
• You are data driven and able to turn operational and project information into actionable metrics and executive insights.
• You communicate clearly, challenge assumptions constructively, and surface risks or decisions early.

Responsibilities

The activities covered by the Program Manager can be grouped into the following areas:

Program and portfolio governance

• Maintain the integrated Information Security portfolio, roadmap, delivery plans, intake process, and governance calendar.
• Help align portfolio planning, reporting, and governance activities to the NIST Cybersecurity Framework, including appropriate visibility across Identify, Protect, Detect, Respond, Recover, and Govern functions.
• Define and apply consistent methods for status reporting, risk and issue management, RAID tracking, dependency tracking, change control, decision logging, and action-item follow-up.
• Track commitments and milestones across security initiatives and ensure owners provide timely updates and corrective actions where required.

Metrics and performance management

• Coordinate the collection, validation, and presentation of security program metrics, KPIs, KRIs, and delivery performance indicators.
• Create and improve dashboards that provide actionable visibility into project status, remediation progress, control implementation, risk reduction, and other measures of program effectiveness.
• Work with functional leaders to improve metric definitions, consistency, data quality, and reporting cadence while keeping accountability for the underlying outcomes with the responsible security teams.

Executive and leadership reporting

• Prepare clear and concise materials for Information Security leadership, the CIO, and other leadership forums.
• Synthesize complex project, risk, and performance information into leadership-level views of accomplishments, trends, constraints, and decisions required.
• Maintain an operating rhythm that connects strategic priorities, portfolio execution, metrics, and leadership decisions.

Your experience includes:

• 5+ years of experience in program management, project management, PMO, portfolio management, or a related role within cybersecurity, Information Security, or a closely related technical security environment.
• Experience managing multiple concurrent projects through initiation, planning, execution, monitoring and controlling, and closure.
• Demonstrated experience establishing project governance, tracking dependencies and risks, and driving cross-functional execution without direct authority.
• Experience developing KPIs, KRIs, dashboards, status reporting, project health views, and executive-level presentations or management reporting.
• Working knowledge of common Information Security domains and the NIST Cybersecurity Framework, including areas such as governance, risk, compliance, identity and access management, security operations, vulnerability management, cloud security, endpoint security, data protection, or application security.
• Strong analytical skills with the ability to identify trends, inconsistencies, delivery risks, and opportunities for improvement.
• Strong written and verbal communication skills, including the ability to translate detailed technical or project information into concise leadership-level messages.
• Experience working with globally distributed teams and stakeholders across multiple functions and time zones.

Preferred Qualifications

• Experience supporting Information Security programs across areas such as security risk, governance, architecture, engineering, security operations, compliance, operational technology, or third-party security.
• Experience with portfolio, reporting, and collaboration tools such as Jira, Confluence, Smartsheet, Microsoft Project, Power BI, SharePoint, Excel, PowerPoint, or similar platforms.
• Project or program management certification such as PMP, PgMP, PRINCE2, or equivalent.
• Familiarity with cybersecurity frameworks, especially the NIST Cybersecurity Framework, security controls, risk-management concepts, and common governance or compliance requirements.

The estimated base salary range for this position is $132,974.00 - $193,816.00. The individual salary is based on work location and additional factors, including job-related skills, experience, and relevant education or training.

Seagate offers comprehensive benefits to its eligible employees, including, but not limited to, eligibility to participate in a discretionary bonus program, medical, dental, vision, and life insurance, short- and long-term disability, 401(k), employee stock purchase plan, health savings account, dependent care, and healthcare spending accounts. Seagate also offers paid time off, including 12 holidays, flexible time off provided pursuant to Seagate policy, a minimum of 48 hours of paid sick leave, and 16 weeks of paid parental leave. The benefits for this position are based on a full-time schedule for a full calendar year and may differ depending on work location.

Location:

This role is an on-site position based in Longmont, CO.

Our Longmont product-design campus is nestled against the foothills with exceptional views of the Rocky Mountains. Here at work, you can grab breakfast and lunch in the on-site cafeteria or get an afternoon espresso, prepared by a professional barista. Our 600+ employees enjoy an active on-site experience from sporting activities (get in a few laps at lunch on our 1-mile walking path around campus, play ping-pong or volleyball, or stop in our 24-hour fitness center for a group or individual workout). We also offer opportunities for community service and participation in various employee resource groups.

Location: Longmont, United States
Travel: None