Security Programs & Innovation Manager

Our approach is built around relationships, execution, and measurable results. We believe that security isn’t just about deploying tools or checking compliance boxes. It’s about helping organizations understand their risks, make informed decisions, and continuously improve.

Our virtual Chief Security Officer (vCSO) practice brings that philosophy directly into our clients’ businesses.

As we continue growing our cybersecurity and compliance services, we’re looking for someone who can help lead those programs while making the services, tools, and processes behind them even better.

The Opportunity

The Security Programs & Innovation Manager will play a central role in developing, managing, and expanding Tier 3’s vCSO and compliance services.

This position combines client-facing security program management, compliance oversight, project accountability, cross-team coordination, and internal innovation.

You’ll work directly with Tier 3 leadership to help guide client security programs, lead governance activities, manage priorities, and ensure the commitments made to our clients turn into measurable results.

You’ll also help shape the future of our services by identifying opportunities for improvement, collaborating with our development resources, and helping bring new tools and capabilities to life.

This is not simply a compliance administrator or project coordinator position. It’s a leadership opportunity for someone who enjoys organizing complex initiatives, solving problems, improving systems, and making sure things get done.

The role will grow over time, with increasing responsibility for independently managing client security programs and leading internal improvement initiatives., 1. vCSO Program Management & Client Leadership

• Partner with Tier 3 leadership to deliver ongoing vCSO services to clients.
• Participate in, prepare for, and eventually lead recurring client security governance meetings.
• Manage meeting agendas, security program updates, risk reviews, and follow-up communications.
• Help clients understand their security responsibilities, compliance obligations, and opportunities for improvement.
• Develop strong working relationships with client leadership, stakeholders, and internal teams.
• Maintain consistent communication and accountability throughout each client’s security program.
• Support client security planning and the development of annual and quarterly security priorities.
• Gradually assume responsibility for managing designated client vCSO engagements independently, with technical and executive support as needed.

1. Compliance, Risk & Governance * Coordinate and help manage client compliance programs, including SOC 2, PCI DSS, HIPAA, and other applicable frameworks. * Support the development, maintenance, and periodic review of client security policies and procedures. * Maintain and review risk registers, remediation plans, compliance milestones, and governance documentation. * Coordinate internal and client-facing risk assessments, management reviews, and security program evaluations. * Help prepare clients for external assessments and audits by organizing documentation, tracking evidence requirements, and ensuring identified gaps are addressed. * Work with clients to establish realistic remediation priorities and monitor their completion. * Maintain accurate documentation showing what was identified, what was decided, who is responsible, and what actions were taken. * Help establish repeatable compliance and governance processes that can be consistently delivered across multiple clients.

2. Client Follow-Through & Project Accountability

One of the most important responsibilities of this position is ensuring that the work identified during client meetings actually gets completed.

• Prepare for upcoming meetings by reviewing prior commitments, outstanding risks, projects, and deadlines.
• Follow up with clients and internal teams on agreed-upon action items.
• Coordinate with technical leadership and engineers to understand remediation requirements, progress, and blockers.
• Help translate security findings and governance decisions into actionable work.
• Track assigned projects, deliverables, dependencies, and completion dates.
• Proactively identify stalled initiatives and work with the responsible parties to move them forward.
• Escalate unresolved risks, missed commitments, or critical issues when appropriate.
• Provide clients with clear, understandable updates on their security program and outstanding priorities.
• Ensure important actions are documented and supported by appropriate evidence of completion.

Success means that our clients see consistent progress, not just recurring meetings and reports.

1. Innovation, Process Improvement & Development Coordination

Tier 3 continually develops and improves its internal systems, client-facing capabilities, and service delivery processes.

This position will help turn those opportunities into real improvements.

• Identify opportunities to improve client security programs, internal processes, reporting, and service delivery.
• Bring forward practical ideas based on client feedback, operational challenges, and observed inefficiencies.
• Collaborate with Tier 3 leadership to evaluate, prioritize, and scope improvement initiatives.
• Help translate business needs and operational problems into clear requirements for developers.
• Coordinate with internal and external development resources to track priorities, deliverables, and progress.
• Participate in testing and evaluating new features, workflows, and applications.
• Provide actionable feedback to development teams and confirm that delivered solutions meet the intended business requirements.
• Help create processes, documentation, and training materials for new capabilities.
• Coordinate the introduction of new tools and features to internal teams and clients.
• Continuously look for opportunities to automate repetitive work, improve reporting, strengthen accountability, and enhance the client experience.

This is a product and process leadership responsibility, not a software engineering position. The goal is to help identify what should be built, why it matters, and whether the finished solution solves the problem.

1. Cross-Team Collaboration

This position will work closely with several key functions across Tier 3.

Client Success

• Partner with the Client Success Manager to align security program initiatives with the broader client relationship.
• Coordinate client communications, service reviews, and important follow-ups.
• Identify opportunities where additional services or improvements could benefit clients.
• Help ensure a consistent, high-quality client experience.

Technical Services

• Collaborate with technical leadership and engineering teams to coordinate security remediation and project execution.
• Help communicate client requirements, compliance deadlines, and business priorities.
• Track technical recommendations through implementation and verification.
• Ensure completed work is appropriately documented for governance and audit purposes.

Executive Leadership

• Work directly with leadership to improve and standardize Tier 3’s vCSO service delivery.
• Help identify emerging client needs and opportunities for service expansion.
• Contribute to the development of new security program capabilities, operational standards, and service offerings.
• Support the continued growth and scalability of Tier 3’s cybersecurity practice.

What Success Looks Like

Success in this role will be measured by outcomes, not simply the number of meetings attended or documents completed.

We expect this person to help deliver:

• Consistent client execution: Security program meetings are prepared, productive, documented, and followed through.
• Visible accountability: Open risks, projects, and action items have clear owners, deadlines, and progress.
• Compliance readiness: Clients maintain organized, current, and defensible security program documentation.
• Strong relationships: Clients view Tier 3 as a proactive, trusted partner in their security and compliance efforts.
• Operational improvement: Good ideas become implemented processes, features, and measurable improvements.
• Scalable delivery: Tier 3’s vCSO program becomes more standardized and easier to deliver consistently as the client base grows.
• Growing independence: The role progressively takes on greater responsibility for managing client programs and guiding internal initiatives., Work directly with leadership to understand our services, clients, and delivery processes. Take ownership of meeting preparation, follow-ups, program tracking, and selected improvement initiatives.

Intermediate Focus - Lead and Improve

Begin leading designated client meetings, managing recurring governance activities, coordinating risk and compliance reviews, and overseeing selected development and process improvement projects.

Long-Term Focus - Own and Expand

Assume primary day-to-day responsibility for designated vCSO client programs, help establish consistent delivery standards, guide continuous improvement initiatives, and contribute to the strategic growth of Tier 3’s security services.

The pace of this progression will be based on demonstrated capabilities, client needs, and readiness.

Who Thrives at Tier 3

Our core values guide how we operate and how we serve our clients.

See It Through - We take ownership of results, not just assignments. We follow through until the outcome is achieved.

Own the Mess - We take responsibility, solve problems, and don’t wait for someone else to step in.

Multiply the Team - We share knowledge, develop better processes, and help those around us succeed.

Lead With Love - We approach people with respect, empathy, honesty, and a genuine commitment to helping them succeed.

• Demonstrated experience managing complex programs, projects, compliance initiatives, or organizational improvement efforts.
• Strong organizational skills and an ability to manage several priorities and stakeholders simultaneously.
• Experience working with security, compliance, governance, risk management, or regulated business environments.
• Excellent written and verbal communication, including the ability to communicate effectively with executive leadership.
• A proactive approach to problem-solving and follow-through.
• Comfort holding people accountable professionally and constructively.
• Ability to translate complex requirements into clear tasks, priorities, and next steps.
• Strong attention to detail and a commitment to accurate documentation.
• Curiosity about technology and an interest in improving how organizations operate.
• Willingness to learn, take ownership, and grow into additional leadership responsibilities.

Valuable Experience

• Hands-on involvement with SOC 2 Type II, PCI DSS, HIPAA, NIST, CIS Controls, or related security frameworks.
• Managing risk registers, policy programs, audits, assessments, or compliance evidence.
• Leading recurring governance or management meetings.
• Experience coordinating technical teams or software development initiatives.
• Experience improving internal applications, business processes, or client-facing systems.
• Familiarity with managed IT services, cybersecurity services, or professional services organizations.
• Security or compliance certifications, or an interest in pursuing relevant professional development.

Formal certifications are valuable, but practical experience, sound judgment, strong communication, and the ability to deliver results are equally important., Attention to Detail - Read This

• Competitive compensation based on experience and responsibilities.
• Health benefits and paid time off.
• Direct involvement in building and shaping a growing cybersecurity practice.
• Meaningful opportunities for leadership development and professional growth.
• The ability to contribute ideas and see those ideas become real improvements.
• A collaborative environment where initiative, accountability, and thoughtful problem-solving are valued., To apply, email your resume as a PDF to careers@gotier3.com. Your subject line must read exactly: Security Programs & Innovation Manager - [Your Full Name]. In the body of your email, briefly describe a time you caught a problem before it became a bigger issue - what tipped you off and what you did about it. Applications that do not follow these instructions will not be reviewed. This is not bureaucracy. It is the first test.

Pay: $100,000.00 - $140,000.00 per year, * 401(k)

• Dental insurance
• Health insurance
• Health savings account
• Paid time off
• Vision insurance

Tier 3 Technology Solutions is a managed IT and cybersecurity firm headquartered in Ankeny, Iowa. We protect businesses by delivering more than technology support. We provide the security leadership, guidance, and accountability organizations need to operate confidently.