Lead Security Portfolio Analyst

Summary:

This role is responsible for overseeing the planning, execution, and management of the holistic Information Security portfolio ensuring alignment of all resources (financials, labor, services, tools, etc.) with organizational goals. Lead Portfolio Managers review and analyze portfolio performance data to measure effectiveness, provide actionable insights, identify portfolio risk, and drive continuous optimization of our resources. They lead the design, development, and execution of portfolio management practices and guardrails for security including resource prioritization and allocation, portfolio risk assessment, and stakeholder engagement. They play a lead role in consulting on strategies to drive on-going prioritization and alignment of security budget and resources with organizational goals to maximize control effectiveness, reduce risk, and ensure operational efficiency. They work with multiple internal and external stakeholders including Security leadership, operations, Finance, Procurement, and Project Management Office (PPMO) to ensure appropriate financial and organizational support is allocated to address organizational goals while maintaining fiscal responsibility. They also serve as subject matter experts (SMEs) for Information Security portfolio management and develop portfolio solutions for critical and highly complex assignments.

Responsibilities:

• Leads security planning and analysis activities and provides strategic and tactical direction on security portfolio resources (Run and investment financials, labor, tools, services, etc.)

• Defines processes and procedures for Security portfolio governance; identifies and reports opportunities for cost, resource, and operational efficiencies and process improvements to management, and recommends possible solutions.

• Manages monitoring and assessment of portfolio performance against organizational benchmarks and KPIs to evaluate effectiveness, provide actionable insights, identify risk, and drive continuous optimization.

• Develops and manages comprehensive reporting that summarizes full portfolio performance, outcomes, risks, and strategic insights to information security leadership to ensure transparent communication and drive proactive, informed decision-making.

• Consults with Security leadership, portfolio managers, and partners (Finance, Procurement, PPMO, etc.) on comprehensive portfolio planning, analysis, and forecasting to inform strategic decisions and align to organizational objectives.

• Develops, refines, and implements security portfolio policies, processes, and guardrails in alignment with enterprise-wide standards.

• Provides ongoing knowledge transfer to other team members and leaders to drive awareness and adoption of security portfolio processes and guardrails.

• Guides, coaches, and mentors peers and leaders in company's Information Security portfolio policies, guardrails, and best practices.

• Participates in on-going prioritization and allocation of Security budget and resources effectively to achieve organizational objectives, maximize return on investment, and ensure operational efficiency.

• Collaborates with key business and IT partners (ISO leadership, Finance, Procurement, PPMO, etc.) to enable cohesive alignment and integration of Security portfolio objectives, processes, and guardrails across the organization

• Evaluates security portfolio processes, guardrails, and goals in comparison to best practices.

Education:

• Bachelor's Degree in Computer Science, Information Technology or any other related discipline or equivalent related experience.

Experience:

• 6+ years of directly-related or relevant experience, preferably in information security.

Preferred Certifications:

• Industry security certification (e.g., CISSP, CCSP, CISM)

• Industry Agile certification (e.g., SAFe Agilist)

• Industry project management certification (e.g., PMP)

• Prior experience with security strategy development or security portfolio management

• Prior experience working in Lean-Agile teams and environments

Behavioral Skills:

• Analytical Skills: Strong analytical and problem-solving skills, with a focus on data-driven decision making.

• Change Leadership: demonstrated success promoting change by helping others to change and remove barriers.

• Consulting and Influencing: strong ability to assess customer needs, provide expert advice, and develop solutions that enhance portfolio performance and alignment with organizational objectives.

• Strategic Communication: able to simplify the complex with proven experience presenting to top level leaders.

• Adaptability: Ability to adjust approach in response to changing or evolving organizational conditions or priorities.

• Collaboration: strong inclination to work effectively with different teams, foster a spirit of cooperation, and break down silos.

Technical Skills:

• Cybersecurity: strong knowledge of cyber principles, frameworks, technologies, and standards (SOX, ISO 27001/27002, COBIT, ITIL, NIST, PCI, etc.).

• Financial Acumen: knowledge of budgeting, financial analysis, and cost management concepts to optimize management of cyber-related financial, technology, and labor resources.

• Vendor management acumen: knowledge of third-party vendor and service provider management and processes for cybersecurity solutions and suppliers.

• Data management and reporting: proficiency in collecting, analyzing, and interpreting data to generate insightful reports that inform decision-making, track portfolio performance, and support effective prioritization and allocation of budget and resources.

• Demand and capacity planning: proficiency in forecasting and aligning capacity allocations with organizational demands to optimize portfolio performance and meet strategic objectives.

Tools Knowledge:

• Microsoft Office Suite

• Reporting Tools (e.g., PowerBI)

• Portfolio Management Tools (e.g., Clarity, ServiceNow, Apptio, etc.)

We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members' ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit https://www.virtualfairhub.com/cencora

*This Salary Range reflects a National Average for this job. The actual range may vary based on your locale. Ranges in Colorado/California/Washington/New York/Hawaii/Vermont/Minnesota/Massachusetts/Illinois State-specific locations may be up to 10% lower than the minimum salary range, and 12% higher than the maximum salary range.

Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.

The company's continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.

Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email hrsc@cencora.com. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned

.