Lab Systems & OT Security Program Manager

Location: Boston, MA
Duration: 6 months
GBaMS ReqID: 10920825
Job Title: Lab Systems & OT Security Program Manager

Program Planning & Tracking

• Own and maintain the master program plan across four active security workstreams:
  • NAA remediation, including RC4-dependent and non-RC4-dependent phases.
  • Software download restrictions.
  • Vulnerability remediation.
  • USB data transfer controls.
• Maintain the program Gantt chart with accurate task owners, dependencies, milestones, and target dates.
• Track progress against key milestones, including RC4 pilot testing, allow/deny list activation, service account demand intake, system owner engagement, and Phase 2 completion.
• Identify and manage dependencies across workstreams, site partners, InfoSec, Active Directory teams, ServiceNow, and external vendors.
• Maintain a live risk and issue log and escalate blockers to program leadership in a timely and structured manner.

Agile Pod Coordination

• Facilitate sprint planning, daily stand-ups, retrospectives, and other Agile ceremonies for a five-member OT Security Engineering team.
• Manage and prioritize the team backlog in alignment with program milestones and stakeholder commitments.
• Coordinate workload distribution across site partners and ensure balanced coverage.
• Track site-specific dependencies and ensure they are incorporated into the overall program plan.
• Partner with the Business Analyst to align stakeholder engagement timelines with engineering execution.
• Ensure field discoveries and engineering findings are reflected in the program plan in real time.

Stakeholder Reporting & Communications

• Prepare and deliver regular program status updates to Lab Solutions leadership, Program Management, and Lab Systems leadership.
• Develop concise reporting packages covering workstream RAG status, milestone progress, open risks, issues, dependencies, and upcoming decisions.
• Maintain Lab & OT Security Confluence pages and ensure program content remains accurate and current.
• Support leadership reviews with CISO and CIDO sponsors by providing structured updates on program health, risks, and delivery confidence.
• Facilitate effective communication between technical teams, business stakeholders, and leadership.

Dependency & Vendor Coordination

• Track and manage dependencies with InfoSec, Active Directory teams, ServiceNow, and external technology vendors.
• Coordinate vendor engagement schedules across multiple sites.
• Track vendor access approvals, allow-list confirmations, engagement records, and related dependencies.
• Monitor the service account demand intake pipeline and ensure requests are appropriately triaged and actioned within agreed timelines.
• Coordinate with vendors such as BeyondTrust and CrowdStrike as required.

Change & Hypercare Management

• Plan and coordinate hypercare activities following major program milestones and security deployments.
• Ensure appropriate team staffing and documented response processes during stabilization periods.
• Track, assign, and close hypercare findings within agreed timelines.
• Maintain lessons-learned documentation across all workstreams.
• Identify continuous improvement opportunities in program planning, execution, and change delivery.
• Support successful transition from implementation to stable operations.

Required Education

• Bachelor's degree in Business, Information Systems, Engineering, or a related field, or equivalent practical experience.
• PMP, PRINCE2, or equivalent project management certification is preferred.

Required Experience

• 3–6 years of relevant project or program management experience.
• Experience managing technology, IT security, or regulated life sciences programs is preferred.
• Demonstrated experience managing multiple concurrent workstreams with complex dependencies, owners, and stakeholders.
• Experience coordinating Agile delivery teams and facilitating sprint ceremonies.
• Proven experience preparing structured program reporting for senior and executive audiences.
• Experience managing vendor relationships and external dependencies.
• Pharmaceutical, biotech, or similarly regulated industry experience is strongly preferred.

Program & Project Management Skills

• Strong knowledge of program planning and project management techniques.
• Experience with Gantt charts, risk logs, RAID registers, dependency mapping, and milestone tracking.
• Proficiency with project management tools such as Jira, Microsoft Project, Smartsheet, or equivalent platforms.
• Knowledge of Agile methodologies, including Scrum and Kanban.
• Understanding of traditional Waterfall delivery methodologies.
• Ability to blend Agile and Waterfall approaches based on program requirements.
• PMP, CAPM, PRINCE2, or SAFe certification is a plus.

Communication & Stakeholder Management

• Excellent written and verbal communication skills.
• Ability to produce concise, accurate program status reports and present program health to senior leadership.
• Strong meeting facilitation skills.
• Ability to conduct structured stand-ups, planning sessions, risk reviews, and stakeholder meetings across distributed teams and time zones.
• Strong ability to build credibility and relationships with technical engineers and non-technical business stakeholders.
• Excellent collaboration and influencing skills in environments where the PM has no direct authority over delivery teams.

Tools & Platforms

• Confluence or equivalent knowledge-management and collaboration platform.
• ServiceNow or equivalent IT Service Management (ITSM) platform.
• Microsoft Excel, PowerPoint, and Word for reporting, Gantt management, and communications.
• Jira, Microsoft Project, Smartsheet, or equivalent project management tools.
• Familiarity with security and IT operations tools such as CrowdStrike, BeyondTrust, and Active Directory is an advantage.

Working Style

• Highly organized with a strong focus on structure, clarity, and accountability.
• Comfortable creating order and structure within ambiguous and fast-moving programs.
• Proactive in identifying risks, issues, and dependencies before they impact delivery.
• Strong ability to influence without direct authority.
• Collaborative, low-ego, and team-oriented approach.
• Resilient and adaptable when priorities shift or external dependencies change.
• Able to quickly replan and adjust delivery strategies based on new findings, risks, and changing requirements.