Sr. InfoSec Program Manager

Mitek (NASDAQ: MITK) is a global leader in digital & biometric identity authentication, fraud prevention, and mobile deposit solutions. Our verified identity platform and advanced image capture solutions are built on the latest advancements in biometric recognition, artificial intelligence, computer vision and machine learning, and trusted by over 7,500 organizations worldwide. We are headquartered in San Diego, California, with operations in the United Kingdom, Spain, France, Mexico, and the Netherlands. Visit us at www.miteksystems.com. We are Virtual 1st! Whether you choose to work remotely from your home office or in-person from one of Mitek’s offices, our practices, processes and tools are designed to enable your success. At Mitek, the Future of Work is about flexibility and preference wherever and whenever we are working. Because we care about our candidates, employees and customers, we include an in-person meeting as part of our hiring process. It’s one of the ways we live our mission to “Protect What’s Real.” At Mitek, we believe that teams are more resilient, effective, and innovative when they benefit from a wide range of ideas, lived experiences, and perspectives. The strength of our organization is deeply rooted in the people who power it.​ We know that a workforce reflecting the richness of our communities and customers helps us better serve their needs. Information Security Program Manager will be the operational backbone of the department, ensuring the program runs efficiently and measurably — coordinating initiatives across all security functions, producing executive reporting, and managing the operational cadence so the VP, IT & Security can focus on the board, customer security relationships, regulatory engagement, and strategy. Not a hands-on engineering role and not traditional project management; it sits at the intersection of security literacy, program management, and executive communication.  What You’ll Do (Essential Responsibilities)

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. 

 Program & Project Coordination

• Own the security program roadmap at the execution level across all security functions 

• Track initiatives, timelines, and blockers without requiring VP involvement day-to-day 

• Manage cross-functional dependencies with Engineering, IT, Legal, and Compliance 

• Act with delegated authority from the VP on operational execution matters 

Metrics, Reporting & Dashboards

• Build and maintain the security metrics framework — vulnerability SLA compliance, incident-response timelines, audit-finding closure, and training completion 

• Produce dashboards for board reporting, SEC disclosure prep, audit-committee updates, and customer security reviews 

• Translate raw tool and team data into a coherent program narrative for executive and external audiences 

Audit & Compliance Coordination

• Coordinate security-team evidence collection for SOC 2, ISO 27001, PCI-DSS, and customer audits 

• Serve as the security team's interface to the General Counsel's Compliance team 

• Maintain audit-readiness documentation year-round and track findings to closure 

Policy, Awareness & Vendor Administration

• Own the security policy lifecycle — annual review, version control, approval, accessibility 

• Own the security awareness and training program including phishing simulations 

• Manage security-tool contracts, renewals, license utilization, and MSSP relationship logistics 

This job description reflects management’s assignment of essential functions; and nothing in this herein restricts management’s right to assign or reassign duties and responsibilities to this job at any time. 

Managerial Responsibilities

• Non-Manager: No oversight or accountability for others, an individual contributor. 

What You Need (Education/Licenses/Certifications, Experience, Knowledge, Technical Skills and Abilities)

Knowledge, skills and abilities typically gained through 5–8 years in security or IT program management, or a security operations coordination role

Working familiarity with NIST CSF, SOC 2, ISO 27001, and PCI-DSS

Cross-functional program management in a regulated or compliance-driven environment

Strong written communication for executive reports and board materials

Experience coordinating audits including evidence collection and finding tracking 

What Would be Nice (Preferred Skills & Experience)

Financial services, fintech, or SaaS serving regulated industries

Familiarity with GDPR, NIS2, or DORA

PMP, CISM, or CISSP

SEC cybersecurity disclosure or public-company audit-committee reporting

MSSP relationship management 

Success Metrics -First Year

Roadmap documented, socialized, and tracked within 60 days

Metrics dashboard live and reported monthly within 90 days

Zero missed audit-evidence deadlines in the first cycle

Training completion above 95% company-wide within the first program cycle

VP time on operational coordination materially reduced 

We take pride in enabling career growth in an environment of innovation and teamwork.  Our commitment to all Mitekians is to do meaningful work that matters.  Our culture is defined by delivering our best to our customers by providing high value solutions and impactful outcomes, by continuously challenging convention, and by caring for each other through collaboration and celebrating our successes.  We are committed to creating competitive, equitable compensation & benefits programs and career development opportunities. 

Benefit offerings – may vary based on geographic location

Wellness: Universal, supplemental, and private healthcare plan choices based on country specifics 

Financial future: retirement/pension plan contributions, MTK stock plan participation  

Income protection: life event & disability coverage 

Paid time off: generous annual leave, company holidays, volunteer time off 

Learning: e-learning license, tuition reimbursement, hackathons 

Home office setup allowance

Additional/optional benefits: pet insurance, identity theft protection, legal assistance 

We sincerely appreciate your interest in Mitek. We know your time is valuable and look forward to the potential of speaking with you further!