Senior Project Manager, Information Security
Job Description
Job Description:
Lead the Information Security project management team, covering programs across all security sub-teams.
- Own portfolio tracking, quarterly OKRs and the monthly program status report to senior leadership, with clear owners, dates, risks and asks, backed by data.
- Drive cross-team programs end to end: plan milestones, manage dependencies and secure committed dates from engineering, IT and business partners.
- Define clear ownership and accountability for cross-team programs, so every deliverable has a named owner.
- Coordinate compliance and audit programs such as SOC 2, PCI DSS, ISO 27001 and MAS TRM, including control owners, evidence, timelines and remediation of findings.
- Track red-team, penetration-test and vulnerability findings to closure across security and engineering teams.
- Run program cadences, challenge unrealistic timelines with facts, risk and priority, and escalate early with options and a clear ask.
- Improve project management processes, trackers and dashboards, using automation and AI to reduce manual follow-up.
Requirements:
- At least 5 years of full time project or program management, including at least 2 years leading a team of project managers.
- Proven delivery of complex, multi-team programs in information security, infrastructure, cloud or IT risk.
- Hands-on experience with at least one external audit or certification, such as SOC 2, PCI DSS, ISO 27001 or a financial regulator's technology risk review.
- Strong stakeholder management across cultures and time zones, persistent in driving commitments while keeping relationships strong.
- Able to run many programs in parallel and make clear priority trade-offs.
- Working knowledge of security and infrastructure concepts, and a structured, data-driven way of working.
- PMP, PgMP, CISA, CISM or CISSP certification, experience in banking or other regulated industries are a plus.
More Info
Job Type:
Industry:
Function:
Employment Type:
Key Skills
SOC 2
infrastructure concepts
PgMP
About Company
Skills:
policy development , Network Security, Data Protection, Iso 27001, Endpoint Security, Cloud Security, Stakeholder Management, CIS Controls, Technical Writing, Documentation, Policies, Cybersecurity Governance, NIST CSF
Skills:
Vulnerability Management, Incident Response, Devops, Application Security, cloud security, Iam, Siem, Soc, Infrastructure Security, Cybersecurity, It Operations, Security Architecture
Skills:
Confluence, Iso 27001, Cybersecurity, JIRA, SOC 2 Type II, Cisa, NIST 800-53, CRISC, CIS
Skills:
information security governance , security assurance , Information Security Management, It Infrastructure, IT Security, Compliance activities, Cybersecurity Risk Management, Cybersecurity Incident Management, Security Architecture, It Governance, Information Security regulations and standards, Security control implementation, Business Application Systems Security
Skills:
Cybersecurity, Sdlc, Jira, Devops, Agile Coaching, Scrum Master, Identity Access Management, JQL basics, Automation rules, Jira board configuration, Six Sigma, Certified ScrumMaster, Atlassian Certified Jira Administrator, Project planning concepts, Sprint reporting, Project management basics