Security Program Manager, Earnest

• At least 7 years of relevant experience in information security, compliance, risk management, or program management, with the ability to contribute at both strategic and tactical levels
• A minimum of 1 year experience managing complex security compliance functions and ensuring successful execution of key initiatives
• Deep expertise in audit processes and security compliance frameworks such as GLBA, FFIEC, NY DFS, SOC 2, and SOX
• Proven track record of leading cross-functional initiatives and managing complex projects from inception to completion
• Strong understanding of cloud-native technologies (e.g., AWS, Kubernetes) and modern CI/CD workflows
• Willingness to travel to the Oakland office monthly to collaborate with other Earnies

Desirable

• The Security Program Manager position will report to the Head of Security
• Align security policies and controls with applicable compliance requirements (e.g., GLBA, FFIEC, NY DFS, SOC 2, SOX)
• Lead and refine security governance, risk, and compliance processes, including the production of regular program status reports
• Lead high-impact security and compliance projects with cross-team dependencies, ensuring timely and successful completion
• Facilitate scrum ceremonies within the security team to foster a shared understanding of security objectives and initiatives
• Oversee the Security Champions program, driving security awareness and participation throughout the organization
• Overseeing vendor and third-party assessments to ensure compliance with security requirements