How to hire a security program manager

How to hire a security program manager, step by step

Here's a step-by-step security program manager hiring guide:

• Step 1: Identify your hiring needs
• Step 2: Create an ideal candidate profile
• Step 3: Make a budget
• Step 4: Write a security program manager job description
• Step 5: Post your job
• Step 6: Interview candidates
• Step 7: Send a job offer and onboard your new security program manager
• Step 8: Go through the hiring process checklist

What does a security program manager do?

Post a security program manager job for free, promote it for a fee

Post free

1. Identify your hiring needs

   The security program manager hiring process starts by determining what type of worker you actually need. Certain roles might require a full-time employee, whereas part-time workers or contractors can do others.

   Determine employee vs contractor status

   Is the person you're thinking of hiring a US citizen or green card holder?

   Yes

   No

   You should also consider the ideal background you'd like them a security program manager to have before you start to hire. For example, what industry or field would you like them to have experience in, what level of seniority or education does the job require, and how much it'll cost to hire a security program manager that fits the bill.

   This list presents security program manager salaries for various positions.

   Type of Security Program Manager	Description	Hourly rate
   Security Program Manager	Computer and information systems managers, often called information technology (IT) managers or IT project managers, plan, coordinate, and direct computer-related activities in an organization. They help determine the information technology goals of an organization and are responsible for implementing computer systems to meet those goals.	$46-87
   Vice President Of Information Technology	A Vice President Of Information Technology supervises an organization's technology initiatives, IT changes, and updates to all projects. They also identify and propose new information technologies and systems to improve business processes and decision-making.	$52-111
   Information Technology Director	An information technology (IT) Director is a professional responsible for the management, strategy, and execution of an organization's IT infrastructure. He/She supervises a team of workers while working with the organization's management and external vendors and advisors... Show more	$46-94

   Show more

2. Create an ideal candidate profile

   Common skills:

   • Security Program
   • Program Management
   • Oversight
   • Cloud Security
   • Cloud
   • Project Management
   • Risk Management
   • Customer Service
   • Infrastructure
   • Security Operations
   • NIST
   • Risk Assessments
   • Incident Response
   • Azure

   Check all skills

   Responsibilities:

   • Utilize the COBIT framework to properly manage projects and as a best practices guide.
   • Monitor all the controls, reports, and coordination activities for the security team to achieve PCI compliance.
   • Manage development of all internal and external vulnerability scanning products including PCI scanning.
   • Manage and provide direct security oversight for contract requirements supporting all functions of clear facilities operations and management e.g.
   • Manage the stage and promotional operations for all security personnel, including staffing, payroll processing, and general entertainment organization.
   • Aid in preparing the institution for GLBA, SoX and third-party audits.

   More security program manager duties

3. Make a budget

   Including a salary range in your security program manager job description is a great way to entice the best and brightest candidates. A security program manager salary can vary based on several factors:

   • Location. For example, security program managers' average salary in colorado is 34% less than in california.
   • Seniority. Entry-level security program managers earn 47% less than senior-level security program managers.
   • Certifications. A security program manager with a few certifications under their belt will likely demand a higher salary.
   • Company. Working for a prestigious company or an exciting start-up can make a huge difference in a security program manager's salary.

   Average security program manager salary

   $133,121yearly

   $64.00 hourly rate

   ---

   Entry-level security program manager salary

   $97,000 yearly salary

   Updated January 17, 2026

   Average security program manager salary by state

   Rank	State	Avg. salary	Hourly rate
   1	California	$148,332	$71
   2	Washington	$139,028	$67
   3	Connecticut	$135,122	$65
   4	Ohio	$134,314	$65
   5	New York	$130,120	$63
   6	Massachusetts	$129,663	$62
   7	New Jersey	$128,552	$62
   8	Hawaii	$128,341	$62
   9	Rhode Island	$126,447	$61
   10	Georgia	$124,959	$60
   11	Utah	$123,858	$60
   12	North Carolina	$122,893	$59
   13	Kentucky	$121,982	$59
   14	Arizona	$120,395	$58
   15	South Carolina	$120,048	$58
   16	Illinois	$119,562	$57
   17	District of Columbia	$119,026	$57
   18	Virginia	$117,851	$57
   19	Oregon	$115,855	$56
   20	Texas	$114,655	$55

   Average security program manager salary by company

   Company

   Rank	Company	Average salary	Hourly rate	Job openings
   1	Meta	$170,168	$81.81	580
   2	Twitter	$166,377	$79.99	1
   3	eBay	$161,210	$77.50	16
   4	Google	$160,136	$76.99	256
   5	Apple	$151,878	$73.02	208
   6	NVIDIA	$151,813	$72.99	22
   7	Chime	$149,750	$72.00	7
   8	Zoox	$149,206	$71.73	39
   9	VMware	$148,800	$71.54
   10	Rubrik	$147,303	$70.82	11
   11	Hearst	$146,711	$70.53	12
   12	DocuSign	$143,509	$68.99	17
   13	Microsoft	$143,111	$68.80	153
   14	Control Risks	$141,566	$68.06	3
   15	Square	$140,619	$67.61
   16	Motion Recruitment	$138,745	$66.70	18
   17	New Leaf Community Markets	$137,683	$66.19
   18	Fisher Investments	$137,063	$65.90	17
   19	Twilio	$136,486	$65.62
   20	Cornerstone	$136,313	$65.54

4. Writing a security program manager job description

   A good security program manager job description should include a few things:

   • Summary of the role
   • List of responsibilities
   • Required skills and experience

   Including a salary range and the first name of the hiring manager is also appreciated by candidates. Here's an example of a security program manager job description:

   Security program manager job description example

   The Rock Family of Companies is made up of nearly 100 separate businesses spanning fintech, sports, entertainment, real estate, startups and more. We're united by our culture - a drive to find a better way that fuels our commitment to our clients, our community and our team members. We believe in and build inclusive workplaces, where every voice is heard and diverse perspectives are welcomed. Working for a company in the Family is about more than just a job - it's about having the opportunity to become the best version of yourself.
   
   Rocket Central is a centralized hub that delivers thoughtful and innovative solutions for Rocket Companies . We are the center of operations, technology, marketing, HR, legal, strategy and more that propels our companies forward. Here, we'll give you the opportunity to launch your career and work with various companies, spanning multiple industries from fintech, to auto and real estate. We offer you the tools you'll need to succeed, no matter what stage you're at in your career. You'll be able to master your craft here by working on complex problems in a collaborative culture and challenging yourself to make a real impact.
   Apply today to see all that Rocket Central has to offer!
   
   Minimum Qualifications
   Must be a recently transitioned military veteran, military spouse, or actively serving National Guard or Reservist
   
   Preferred Qualifications
   Experience influencing, negotiate with, and gaining buy-in from others, including senior leadership Experience with industry-standard information security frameworks or regulatory compliance frameworks Experience working with project teams spanning organizational levels
   
   Job Summary
   The Rocket Companies Tour of Duty program is an exclusive 6-month program designed to give recently transitioned military veterans, military spouses, or actively serving National Guard & Reservists the opportunity to gain priceless, hands-on experience at an award-winning company. Here, you'll learn how it feels to be in the civilian workplace, participate in events around the city you'll be working in and become a valuable member of our team. Are you the type of person who strives to make a difference?
   
   Responsibilities
   Drive strategy, execution and technical direction for complex information security programs, including scope, deliverables, and communication strategy Own risk mitigation plans, including risk tracking and progress monitoring Develop program milestones, key performance indicators, and success criteria in collaboration with subject matter experts Manage the execution of program plans across internal and external teams with competing priorities, deadlines, and dependencies Create project artifacts related to the phases of the program management life cycle Develop frameworks and best practices for compliance and information security Diagram processes and synthesize data to identify opportunities for improvement and inform decisions Represent Information Security in discussions regarding business strategy discussions, special projects, escalations, and senior leadership escalations Stay informed of broader changes impacting business capabilities, such as emerging security risks and industry trends Assist with incident assessment and incident management as needed
   
   Who We Are
   Rocket Companies is a Detroit-based company made up of businesses that provide simple, fast and trusted digital solutions for complex transactions. The name comes from our flagship business, now known as Rocket Mortgage , which was founded in 1985. Today, we're a publicly traded company involved in many different industries, including mortgages, fintech, real estate, automotive and more. We're insistently different in how we look at the world and are committed to an inclusive workplace where every voice is heard. We're passionate about the work we do, and it shows. We've been ranked #1 for Fortune's Best Large Workplaces in Financial Services and Insurance List in 2022, named #5 on People Magazine's Companies That Care List in 2022 and recognized as #7 on Fortune's list of the 100 Best Companies to Work For in 2022.
   
   Disclaimer
   This is an outline of the primary responsibilities of this position. As with everything in life, things change. The tasks and responsibilities can be changed, added to, removed, amended, deleted and modified at any time by the leadership group.
   
   We are proud equal opportunity employers and committed to providing an inclusive environment based on mutual respect for all candidates and team members. Employment decisions, including hiring decisions, are not based on race, color, religion, national origin, sex, physical or mental disability, sexual orientation, gender identity or expression, age, military or veteran status or any other characteristic protected by state or federal law. We also provide reasonable accommodations to qualified individuals with disabilities in accordance with state and federal law.
   
   The Company is an Equal Employment Opportunity employer, and does not discriminate in any hiring or employment practices. The Company provides reasonable accommodations to qualified individuals with disabilities in accordance with state and federal law. Applicants requiring reasonable accommodation in completing the application and/or participating in the employment application process should notify a representative of the Human Resources Team, The Pulse, at 1-800-411-JOBS.

   Copy this example

   

5. Post your job

   There are a few common ways to find security program managers for your business:

   • Promoting internally or recruiting from your existing workforce.
   • Ask for referrals from friends, family members, and current employees.
   • Attend job fairs at local colleges to meet candidates with the right educational background.
   • Use social media platforms like LinkedIn, Facebook, and Twitter to recruit passive job-seekers.

   Post your job online:

   • Post your security program manager job on Zippia to find and recruit security program manager candidates who meet your exact specifications.
   • Use field-specific websites.
   • Post a job on free websites.

6. Interview candidates

   During your first interview to recruit security program managers, engage with candidates to learn about their interest in the role and experience in the field. During the following interview, you'll be able to go into more detail about the company, the position, and the responsibilities.

   Remember to include a few questions that allow candidates to expand on their strengths in their own words. Asking about their unique skills might reveal things you'd miss otherwise. At this point, good candidates can move on to the technical interview.

   The right interview questions can help you assess a candidate's hard skills, behavioral intelligence, and soft skills.

7. Send a job offer and onboard your new security program manager

   Once you've decided on a perfect security program manager candidate, it's time to write an offer letter. In addition to salary, it should include benefits and perks available to the employee. Qualified candidates may be considered for other positions, so make sure your offer is competitive. Candidates may wish to negotiate. Once you've settled on the details, formalize your agreement with a contract.

   It's also good etiquette to follow up with applicants who don't get the job by sending them an email letting them know that the position has been filled.

   To prepare for the new security program manager first day, you should share an onboarding schedule with them that covers their first period on the job. You should also quickly complete any necessary paperwork, such as employee action forms and onboarding documents like I-9, benefits enrollment, and federal and state tax forms. Finally, Human Resources must ensure a new employee file is created for internal record keeping.

8. Go through the hiring process checklist

   • Determine employee type (full-time, part-time, contractor, etc.)
   • Submit a job requisition form to the HR department
   • Define job responsibilities and requirements
   • Establish budget and timeline
   • Determine hiring decision makers for the role
   • Write job description
   • Post job on job boards, company website, etc.
   • Promote the job internally
   • Process applications through applicant tracking system
   • Review resumes and cover letters
   • Shortlist candidates for screening
   • Hold phone/virtual interview screening with first round of candidates
   • Conduct in-person interviews with top candidates from first round
   • Score candidates based on weighted criteria (e.g., experience, education, background, cultural fit, skill set, etc.)
   • Conduct background checks on top candidates
   • Check references of top candidates
   • Consult with HR and hiring decision makers on job offer specifics
   • Extend offer to top candidate(s)
   • Receive formal job offer acceptance and signed employment contract
   • Inform other candidates that the position has been filled
   • Set and communicate onboarding schedule to new hire(s)
   • Complete new hire paperwork (i9, benefits enrollment, tax forms, etc.)

   Sign up to download full list

   Sign up

How much does it cost to hire a security program manager?