AVP, Information Security Program Manager (L10)

Role Title: AVP, Information Security Program Manager (L10)

Company Overview:

Synchrony (NYSE: SYF) is a premier consumer financial services company delivering one of the industry’s most complete digitally enabled product suites. Our experience, expertise and scale encompass a broad spectrum of industries including digital, health and wellness, retail, telecommunications, home, auto, outdoors, pet and more.

• We have recently been ranked #2 among India’s Best Companies to Work for by Great Place to Work. We were among the Top 50 India’s Best Workplaces in Building a Culture of Innovation by All by GPTW and Top 25 among Best Workplaces in BFSI by GPTW. We have also been recognized by AmbitionBox Employee Choice Awards among the Top 20 Mid-Sized Companies, ranked #3 among Top Rated Companies for Women, and Top-Rated Financial Services Companies.
• We provide best-in-class employee benefits and programs that cater to work-life integration and overall well-being
• We provide career advancement and upskilling opportunities for all to take up leadership roles

Organizational Overview:

The Information Security organization partners across Technology and the business to protect Synchrony’s customers, data, and platforms. The India InfoSec program function drives security culture, awareness, and engagement across sites, aligning local initiatives with enterprise security priorities and ensuring strong participation, measurable outcomes, and consistent execution.

Role Summary/Purpose:

As AVP, Information Security Program Manager, you will lead the strategy, planning, and execution of India-focused InfoSec engagement programs that strengthen security culture and community. This includes security hackathons/CTFs, university/student engagement, employee-facing campaigns, and India hub/site-level InfoSec initiatives. You will partner with Enterprise InfoSec leaders, India site leadership, universities, suppliers, and cross-functional stakeholders to deliver high-impact programs using Agile ways of working and tools such as Jira, Confluence, and SharePoint.

Essential Responsibilities:

• Own the India InfoSec engagement roadmap and annual calendar; translate priorities into plans and measurable outcomes.
• Deliver year-round security culture programs (communications, learning, contests, speaker sessions).
• Lead InfoSec hackathons/CTFs end-to-end: themes/objectives, problem statements (with SMEs/suppliers/universities), platform setup, participant onboarding, logistics, judging, recognition, and reporting/playbooks.
• Manage event budgets/forecasts, vendor coordination, and resource planning (as applicable).
• Ensure initiatives align with enterprise security policies, brand/communications standards, and legal/compliance requirements.
• Run a structured university engagement program (campus connects, guest lectures, workshops, mentorship, CTFs) and maintain key university partnerships.
• Partner with Talent Acquisition/HR and InfoSec leadership to translate hackathon outcomes into intern hiring recommendations and finalist tracking.
• Manage the InfoSec intern program: onboarding/orientation, check-ins, milestone reviews, and mentor coordination.
• Define and track intern assignments/projects (goals, deliverables, timelines, success criteria) and maintain a centralized intern dashboard (joining/access/progress/ risks/outcomes).
• Coordinate internship closure (final demos, documentation handover, feedback/evaluations, and conversion recommendations where applicable) and drive continuous improvement of the pipeline.
• Drive Infosec India hub site initiatives (town halls, brown bags, community sessions, leadership visits).
• Coordinate across Enterprise InfoSec, Technology, Risk/Compliance, HR/L&D, Communications, Legal, Procurement, Facilities, and business teams for scope, approvals, and delivery.
• Provide leadership dashboards, executive updates, and quarterly/annual impact summaries.
• Maintain program documentation in Confluence/SharePoint (charters, playbooks, comms plans, runbooks, asset libraries, retrospectives).
• Manage delivery in Jira (epics/stories, sprint planning, risk/issue/dependency tracking, status reporting).
• Ensure vendor governance (SOWs, deliverable quality, performance tracking, and required security controls).

Required Skills/Knowledge:

• Bachelor’s degree and 5+ years of experience in program/project management, including hackathons/CTFs, university engagement, and employee-facing events in an enterprise environment.
• Demonstrated experience managing enterprise InfoSec programs and cross-functional initiatives end-to-end (planning, execution, governance, stakeholder management).
• Strong working knowledge of Agile delivery practices and hands-on expertise with Jira, Confluence, and SharePoint.
• Proven ability to drive complex programs with multiple stakeholders, dependencies, and time-sensitive deliverables.
• Strong written and verbal communication skills, including executive-ready reporting and broad employee communications.
• Strong execution discipline: risk/issue management, dependency tracking, vendor coordination, and a continuous improvement mindset.

Eligibility Criteria: Bachelor’s degree and 5+ years of experience in program/project management, including hackathons/CTFs, university engagement, and employee-facing events in an enterprise environment.

Work Timings: 2 PM to 11 PM IST - (This role requires the candidate to be based in Hyderabad location)

This role qualifies for Enhanced Flexibility offered in Synchrony India and will require the incumbent to be available between 06:00 AM Eastern Time – 11:30 AM Eastern Time (timings are anchored to US Eastern hours and will adjust twice a year locally). This window is for meetings with India and US teams. The remaining hours will be flexible for the employee to choose. Exceptions may apply periodically due to business needs)

For Internal Applicants:

• Understand the criteria or mandatory skills required for the role, before applying
• Inform your manager and HRM before applying for any role on Workday
• Ensure that your professional profile is updated (fields such as education, prior experience, other skills) and it is mandatory to upload your updated resume (Word or PDF format)
• Must not be any corrective action plan (First Formal/Final Formal, PIP)
• L9+ Employees who have completed 18 months in the organization and 12 months in current role and level are only eligible.
• Level 9+ Employees can apply.

Grade/Level: 10

Job Family Group: