Sr. Manager, Cybersecurity Program Management

What You'll Do

• Implement cybersecurity strategy through prioritized programs and initiatives, establishing governance, performance metrics, and reporting that align security investments with business objectives and risk reduction goals. Lead cybersecurity programs and remediation initiatives, overseeing vulnerability management, security assessments, audits, compliance activities, and the resolution of program risks, dependencies, and escalations. Drive accountability across business and technology teams by coordinating remediation commitments, monitoring execution, and ensuring timely delivery of security and risk reduction outcomes. Build and influence cross-functional partnerships across cybersecurity, technology, and business organizations, translating technical issues into business risk, action plans, and executive decision-making insights. Develop and maintain processes for security findings, remediation tracking, compliance alignment, and consistent program management, reporting, and documentation standards. Monitor key risk and performance indicators, leveraging dashboards, scorecards, and trend analysis to measure program effectiveness, track milestones, and identify opportunities for continuous improvement. Provide data-driven reporting and executive communications on program status, risk, remediation progress, and cybersecurity outcomes to support leadership decision-making and governance reviews. Build, coach, and develop a high-performing cybersecurity program team, fostering a culture of accountability, collaboration, continuous improvement, and alignment with Crocs Leadership Blueprint expectations. What You'll Bring to the Table Bachelor’s degree in Business, Information Technology, Cybersecurity, or related field. 8+ years of program or project management experience, including 3+ years of leading teams. Experience leading large-scale cybersecurity, technology, or risk management programs Strong knowledge of cybersecurity concepts including maturity and risk assessments, risk heat maps, SOX and SOC reporting, PCI, etc. Understanding of Identity Access Management and Vendor Risk Management and how to operate these risk areas. Experience working cross-functionally with technology and business stakeholders. Exceptional communication, facilitation, and stakeholder management skills, with a demonstrated ability to drive outcomes through influence and collaboration. Experience with task automation, dashboard development, metrics, and reporting. #LI-AE1 The Company is an Equal Opportunity Employer committed to a diverse and inclusive work environment. We accept applications on an ongoing basis. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or disability, or any other classification protected by law. Title: Sr. Manager, Cybersecurity Program Management Salary or Pay Range: $140,000 - $150,000 Pay offered will vary based on job-related factors such as location, experience, training, skills, and abilities. At Crocs, Inc. we believe in the power of a blend of in-person and virtual collaboration to drive creativity and strengthen relationships. Your participation in this flexible schedule plays a key role in building a connected and successful team. In-office requirements vary by our work personas: Resident (5 days), Collaborator (4 days), Connector (2-3 days), Explorer (fully remote). This role has been aligned to the Collaborator persona. This organization participates in E-Verify . This position is eligible to participate in a company incentive program. This position is eligible for company benefits including but not limited to medical, dental, and vision coverage, life and AD&D, short and long-term disability coverage, paid time off, employee assistance, participation in a 401k program that includes company match, and many other additional voluntary benefits. The application window is 45 days, but applicants are encouraged to apply as soon as possible after the posting date in order to ensure optimal consideration. The posting will be removed if the job is filled before the application window deadline. Job Category: Corporate