Project Manager, Security

We respectfully request that 3rd parties refrain from contacting us regarding this posting.

KEY RESPONSIBILITIES

Project Leadership & Execution

• Manage end-to-end delivery of information security projects including security tool implementations, risk remediation programs, compliance initiatives, vulnerability management efforts, security operations enhancements, and AI governance initiatives.
• Develop detailed project plans, timelines, resource allocations, dependency management strategies, and communication plans.
• Track project status, risks, issues, and dependencies while driving accountability across cross-functional teams.
• Coordinate efforts across Security Operations, Security Architecture, Product Security, GRC, Infrastructure, and business stakeholders.
• Ensure projects align with organizational security strategies, regulatory requirements, and risk mitigation objectives.

Information Security Program Support

• Partner with security leaders to support initiatives across:

• Data Loss Prevention (DLP), Information Protection, and Encryption

• Email Security and Security Awareness/Phishing Programs

• AI Security and AI Governance

• Cloud and Service Security

• Vulnerability Management

• Security Monitoring and Incident Response

• Security Architecture

• Third-Party/Vendor Risk Management

• Business Continuity and Resilience Programs

• Product Security, Secure Development, Threat Modeling, and Red Team Exercises

• Facilitate discussions with technical teams and stakeholders while demonstrating a foundational understanding of cybersecurity concepts, controls, and terminology.

Governance, Risk & Compliance

• Support GRC initiatives including compliance, risk assessments, security audits, vendor risk reviews, and policy implementation.
• Ensure projects adhere to internal security standards and regulatory frameworks such as NIST, ISO 27001, SOC 2, and other applicable requirements.
• Collaborate with compliance and risk teams to prioritize and execute remediation efforts.
• Support security governance activities and reporting for leadership.

Stakeholder Management

• Serve as the primary point of contact for project stakeholders, ensuring alignment on scope, objectives, risks, and deliverables.
• Provide regular reporting and executive-level communications regarding project progress, security risks, and key decisions.
• Build effective relationships with Security, IT, Compliance, Legal, Product Development, and business teams.

Process Improvement

• Contribute to the development and enhancement of project management methodologies and security program governance processes.
• Identify opportunities to improve security operations, project execution, risk management, and organizational readiness.
• Support organizational change management efforts associated with security initiatives.

EXPERIENCE & QUALIFICATIONS

• Bachelor's degree in Information Security, Computer Science, Information Systems, Business, or a related field, or equivalent experience.

• 7+ years of project or program management experience, including experience supporting cybersecurity or information security initiatives.

• Demonstrated understanding of core information security concepts, terminology, and best practices.

• Experience managing projects involving one or more of the following:

• Security Operations

• Data Protection, DLP, and Encryption

• Vulnerability Management

• Identity and Access Management

• Email Security and Security Awareness

• Security Monitoring and Incident Response

• Security Architecture

• Governance, Risk & Compliance (GRC)

• Vendor Risk Management

• Product Security and Secure Software Development

• AI Security and AI Governance

• Familiarity with security frameworks such as NIST CSF, ISO 27001, CIS Controls, and SOC 2.

• Experience working with enterprise security technologies and platforms such as Palo Alto Networks, Prisma Access, Cortex, GlobalProtect, SIEM, vulnerability management, and cloud security solutions is highly desirable.

• Strong ability to communicate effectively with both technical and non-technical audiences.

• PMP, CISSP, CISM, CRISC, or other relevant certifications are preferred.

Compensation

$80-$90/hr - Dependent on fit and experience