Program Manager, IT Cybersecurity

Work with a Top 20 CPA and advisory firm that Accounts for Anything. Aprio has 40 U.S. office locations, as well as international office locations and more than 3,200 team members that speak 60+ languages across the globe. By bringing together proven expertise, deep understanding, and strategic foresight for fast-growing industries, Aprio ensures clients are prepared for wherever life or business may take them. Discover a top-rated culture, vast growth opportunities and your next big career move with Aprio.

Job Summary

Aprio is seeking a Program Manager to lead the operational program that keeps the firm's Cybersecurity Operations team running at its best. In this role, you will own the program infrastructure around daily defensive operations — including on-call coverage, alert-quality reviews, incident response coordination, vendor relationships, and executive reporting. You will partner closely with analysts, Detection Engineering, GRC, and external partners to ensure the team operates with consistency, accountability, and continuous improvement. This role sits at the center of how the Operations team plans, measures, and communicates its work.

What You'll Gain/ Impact

• Opportunity to build and mature a cybersecurity operations program at a high-growth professional services firm
• Direct influence on how the firm prepares for, responds to, and learns from security incidents
• Exposure to cross-functional collaboration across Cybersecurity, GRC, IT, Legal, and business leadership
• Ability to shape the workforce development of a growing analyst team through training matrix ownership
• A front-row seat to enterprise security operations, with meaningful impact on how the firm manages risk

Key Responsibilities

• Own the SOC operating cadence, including the on-call rotation, alert-quality review cycle, shift handoffs, and escalation paths; identify and resolve process drift early
• Coordinate live incidents by keeping the right people engaged, recording decisions in real time, and assigning and tracking follow-up actions — technical decisions remain with the incident lead
• Design, facilitate, and document quarterly tabletop exercises for the Operations team; support larger cross-functional exercises involving legal, IT, and business leaders
• Run structured post-incident reviews following significant incidents, using severity levels defined in the incident response plan, and ensure lessons feed back into playbooks and the detecti...

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam, eaque ipsa quae ab illo inventore veritatis.