Information Security Program Manager

The role is open for hiring in Poland, Romania, and Portugal

About us bolttech is an international insurtech with a mission to build the world’s leading, technology-enabled ecosystem for protection and insurance. With a full suite of digital and data-driven capabilities, bolttech powers connections between insurers, distributors, and customers to make it easier and more efficient to buy and sell insurance and protection products.

A part of Pacific Century Group, bolttech serves customers in multiple markets across North America, Asia and Europe.

In this position you will…

Own the execution and operational management of the Information Security program, working closely with the Chief Information Security Officer (CISO) to translate security strategy and annual objectives into a structured, measurable, and well‑governed program of work. Reporting directly to the CISO, you will carry an explicit mandate to set and enforce the program’s operating cadence, hold initiative owners accountable to commitments, and make or escalate prioritization and sequencing decisions - operating through influence and delegated authority rather than as a passive tracker.

You will ensure that security initiatives are clearly defined, properly prioritized, actively tracked, and transparently reported, enabling consistent progress, effective risk management, and strong delivery outcomes across the Information Security function. You will also champion the use of AI‑powered tools and automation to streamline how the program is planned, tracked, reported, and governed - raising the speed, accuracy, and scale at which the Information Security function operates.Success in this role is measured by delivery outcomes, not activity - including on‑time progress of security initiatives, measurable risk reduction and audit/assessment readiness, the quality and timeliness of escalations, and the predictability and transparency of the overall portfolio. Accountability for delivering each initiative remains with the domain owners; you are accountable for the cadence, visibility, and discipline that make that delivery predictable.

You will be responsible for…

• Partnering closely with the CISO to define annual information security goals, priorities, and key initiatives, and translating them into an actionable program roadmap.
• Structuring the Information Security program into clear initiatives, milestones, owners, dependencies, and success measures.
• Establishing and running the security program operating cadence, including regular reviews, tracking sessions, and leadership updates.
• Working with Information Security domain leads to ensure initiatives are realistically scoped, aligned to objectives, and supported by clear delivery plans.
• Tracking progress across the security portfolio, identifying risks, dependencies, and delivery gaps, and driving timely resolution or escalation.
• Maintaining a single source of truth for security program status, milestones, risks, and decisions. in monday.com (or an equivalent work/program management platform).
• Producing clear, executive‑ready reporting, including status updates, dashboards, roadmaps, and narrative summaries focused on outcomes and risk reduction.
• Leveraging AI‑powered tools and automation to accelerate reporting, surface risks and delivery gaps earlier, reduce manual effort, and improve the timeliness and quality of program insights.
• Building and maintaining automated dashboards, workflows, and status tracking in monday.com (or a similar platform) to give stakeholders real‑time visibility into the security program.
• Supporting quarterly and yearly security planning, re‑prioritization, and progress reviews.
• Ensuring consistency in how security initiatives are governed, tracked, and reported across regions and domains.
• Facilitating coordination between Information Security, Technology, Engineering, Compliance, Privacy, Risk and other stakeholders as required.

For you to be successful… …we expect you to be able to demonstrate the following key competencies:

• Strong ability to operate at the intersection of strategy and execution, turning high‑level security goals into tangible, trackable outcomes.
• Proven experience running complex programs with multiple parallel initiatives and cross‑functional dependencies.
• Excellent organizational and follow‑through skills, with a focus on predictability, transparency, and delivery discipline.
• Confidence working with senior stakeholders, including presenting program status, risks, tradeoffs, and recommendations.
• High emotional intelligence (EQ) and strong collaboration skills, enabling effective partnership with security leaders and delivery teams.
• Strong AI fluency, with a demonstrated ability to apply AI‑powered tools and automation to improve program management, reporting, and decision‑making - and a habit of continuously adopting emerging AI capabilities to work smarter.
• Clear, structured written and verbal communication skills in English, with the ability to simplify complex information for different audiences.
• Proven effectiveness coordinating stakeholders across multiple regions and time zones (North America, Asia, and Europe), including disciplined asynchronous working and occasional travel.

You will require the following qualifications and skills

• Minimum of 8 years of experience in program or project management, preferably within information security, technology risk, or enterprise technology environments, including demonstrated end‑to‑end ownership of at least one global security, GRC, or technology‑risk program.
• Demonstrated experience managing global, cross‑functional programs rather than standalone projects.
• Strong documentation, reporting, and governance skills, with proficiency in common productivity and program management tools such as monday.com (or a similar work/program management platform).
• Hands‑on experience using AI‑powered productivity and automation tools to drive efficiency and quality, together with a strong appetite to adopt, experiment with, and scale emerging AI capabilities across the program.
• Familiarity with information security domains, concepts, and standards (for example ISO 27001, SOC 2, PCI, NIST CSF, DORA, and GDPR), sufficient to constructively challenge the scoping and prioritization of security initiatives - not only to plan and track them.
• Ability to balance multiple priorities and stakeholders while maintaining delivery focus and execution rigor.

Diversity and Inclusion At bolttech, we are diverse and inclusive. We value each person's unique skills, background, and identity. We never discriminate on cultural background, religion, sex, gender, gender identity or expression, sexual orientation, age, disability, veteran status, genetic information, marital or family status or any legally protected status. Everyone belongs. And because everyone’s different, we’re also flexible in the ways we work, so each person can bring their best efforts every day.