First Hawaiian Bank is seeking a Cybersecurity Program Manager for an onsite role in Honolulu, HI. This position will coordinate cybersecurity program governance, compliance activities, reporting, metrics, and control maturity initiatives in support of the Cybersecurity Division and the CISO.
Role Overview
The Cybersecurity Program Manager manages compliance, Security Awareness and Training, governance, budget activity, and cybersecurity program tracking and reporting. The role supports planning and governing delivery of the Bank’s cybersecurity strategy and objectives, including analytics and metrics, audit responses, and control maturity and risk quantification programs. The position also facilitates internal and committee reporting, regulatory readiness support, and cross-functional coordination across Cybersecurity and IT.
Key Responsibilities
- Manage compliance, Security Awareness & Training, governance, financial and budget activity, and project management tracking and reporting for the Cybersecurity Division.
- Support the CISO in planning and governing delivery of the Bank’s cybersecurity strategy and objectives.
- Maintain tracking and analysis of core Cybersecurity Division activities across Identity Access Management (IAM) and Cyber Operations, and Security Architecture.
- Create and maintain a RACI role matrix for responsibilities across Cybersecurity and IT to ensure clear accountability and task ownership.
- Maintain analytics and metrics for work across the cybersecurity program.
- Ensure committee and internal reports are prepared for CISO review.
- Organize and prepare responses to audit activities.
- Maintain the division’s compliance program.
- Serve as liaison to second line risk counterparts on behalf of the Cybersecurity Division.
- Support team readiness for regulatory reviews.
- Lead and own delivery of the Cybersecurity Division Annual Control Maturity Assessment.
- Develop and lead the Cyber Risk Quantification Program (CRQ).
- Collaborate with the CISO to prepare strategic cybersecurity updates for senior executives.
Required Qualifications
- Bachelor’s degree in Cybersecurity, an IT-related field, Business Management, or equivalent experience; including five (5) years of cyber project management related experience on complex cybersecurity projects.
- Five (5) years of experience with cybersecurity or IT reporting, oversight, and supporting program management, risk management, compliance and/or governance.
- Five (5) years of progressive experience across cybersecurity, information security, IT governance, risk management, compliance, audit, program management, or a related field.
- Five (5) years of experience managing enterprise-level programs, governance processes, or strategic initiatives, including executive-level reporting, metrics, dashboards, and presentations.
- Five (5) years of experience managing enterprise-level programs, governance processes, or strategic initiatives, including support for audits, regulatory examinations, risk assessments, or compliance programs.
- Five (5) years of experience managing enterprise-level programs, governance processes, or strategic initiatives, including managing projects and coordinating across multiple stakeholders and business functions.
- Five (5) years of experience managing enterprise-level programs, governance processes, or strategic initiatives, including tracking budgets, forecasts, expenses, or financial reporting for technology or business programs.
Preferred Qualifications
- Master’s degree in Cybersecurity, Information Security, Business Administration (MBA), Risk Management, or related field.
- Ten (10)+ years of experience in cybersecurity, information security, governance, risk, or compliance functions.
- Experience in a technical field such as cybersecurity, project management, management information systems, program structure or development, business analytics, requirements definition, or similar work.
- Experience within banking, financial services, or other highly regulated industries.
- Experience planning, preparing, coordinating and/or delivering training to users of information management systems.
- Experience in innovation and leadership to grow and expand current programs.
- Experience with cyber risk quantification methodologies and control frameworks (e.g., NIST CSF 2.0).
Skills and Competencies
- Strong analytical, critical thinking, and problem-solving skills to assess complex issues and recommend practical solutions.
- Excellent planning, organizational, and project management skills to manage multiple priorities and deadlines.
- Advanced proficiency in Microsoft 365 applications, including Excel, PowerPoint, Word, and collaboration tools.
- Strong written, verbal, presentation, and interpersonal communication skills with the ability to communicate with technical and non-technical audiences.
- Ability to develop executive-level reports, dashboards, metrics, and presentations that support strategic decision-making.
- Proven ability to build collaborative relationships across business, technology, risk, compliance, audit, and vendor stakeholders.
- Skilled in facilitating meetings, governance forums, and cross-functional discussions.
- Ability to exercise sound judgment, maintain confidentiality, and handle sensitive information professionally and discreetly.
- Strong attention to detail, accountability, and follow-through.
- Demonstrated ability to work effectively in a fast-paced, evolving environment with changing priorities and competing demands.
- Strong time management, stakeholder management, negotiation, and influencing skills.
- Demonstrated track record of delivering high-quality results and driving continuous improvement.
Technologies
- Microsoft 365
- Excel
- PowerPoint
- Word
- NIST CSF 2.0
Work Schedule
Monday - Friday, 8:00AM - 5:00PM (hours may vary).
Compensation
The pay range for the role is $110,000 - $140,000 per year, commensurate with experience.
Education
Bachelor’s degree in Cybersecurity, IT-related field, Business Management, or equivalent experience.
