Associate Director - IT Project Manager, Physical Protective Security

Description

This senior role owns delivery of complex security and technology programs that span several regions across REFS.

You bring strong physical protective security knowledge in access control, surveillance, and risk and compliance, combined with senior IT project and program management.

You are the accountable delivery lead for security-critical programs such as access control, video surveillance, identity and access platforms, and digital security solutions.

Your aim is predictable delivery, regulatory compliance, and aligned work between Physical Protective Security, DDIT, Procurement, and external vendors.

Responsibilities

• Take projects from intake through handover, keeping them on time, in scope, and within budget, with clear ownership at every step.
• Coordinate security vendors, integrators, SaaS providers, and local partners across complicated delivery landscapes.
• Lead global and regional rollouts of security platforms such as access control, CCTV, and mobile credentials.
• Act as a trusted partner to security teams, turning business security needs into IT delivery plans that meet security standards, policies, and regulations.
• Align physical security, cybersecurity, and enterprise IT architecture.
• Oversee implementation of access control (badge, mobile, or biometric), video surveillance and monitoring, identity and access integrations, and security operations and incident management tools.
• Set up and enforce project governance in line with DDIT standards.
• Identify, manage, and reduce security, operational, and delivery risks.
• Ensure compliance with frameworks such as audit, GRC, and SoD where relevant, and manage change control, approvals, and documentation.
• Serve as the main link between Protective Security leadership, the business, and IT delivery teams, aligning global, regional, and site stakeholders.
• Prepare executive status updates, decision papers, and escalations, and shape decisions in a matrixed organization.
• Manage security vendors against contract deliverables and milestones, resolve performance issues, and escalate when needed.
• Work with Procurement on SOWs and contracting models.
• Own project financials, including forecasting, tracking, and cost control.
• Help shape the Protective Security IT roadmap and project portfolio plan.
• Standardize delivery approaches across sites and regions, and capture lessons learned to improve delivery frameworks.

Requirements

• 10+ years of IT project or program management in enterprise or regulated settings, including protective security work in multi-country deployments.
• Solid exposure to physical security systems such as access control, surveillance, CCTV, digital visitor management, and alarm systems, plus enterprise platforms such as SAP, ServiceNow, IWMS, and security systems.
• Deep understanding of physical security systems and their operations, experience in global security settings and regulatory expectations, and the ability to balance security effectiveness, operational needs, and cost, with strong risk and compliance awareness.
• A track record of managing external vendors and complex contracts, including RFPs, with solid knowledge of security technology vendors.
• Proven execution in Waterfall, Agile, and hybrid methods, with strong planning, dependency management, and critical-path thinking.
• Senior project leadership in complex matrixed organizations, with sound decisions under ambiguity and delivery pressure, and the ability to enforce standards without damaging stakeholder relationships.
• Experience delivering across multiple countries and managing large, interdependent delivery plans.
• Fluent English and clear, concise, executive-ready communication that turns technical and delivery topics into business impact.
• Desirable: a degree in IT, engineering, security, or a related discipline.
• Desirable: certifications such as PMP, PRINCE2, Agile, or security certifications like CPP or CISSP.
• Desirable: experience in pharma, regulated industries, or critical infrastructure.
• Desirable: knowledge of GRC, identity and access management, and compliance frameworks.
• Skills tagged for this role: change management, communication, decision making, leadership, negotiation, operational excellence projects (inactive), problem solving, project finances, project management, project planning, project risk management, project team management, stakeholder engagement, and strategy development.

Conditions

Based in Barcelona, Spain, with a hybrid setup of 12 days per month in the office.

Expected annual base salary: €57,900 to €107,500.

Base pay is set using gender-neutral criteria such as skills, competencies, and experience, in line with the company's pay policy, and is reviewed periodically after joining.

Relocation support is not offered, so apply only if the role is accessible to you.

Benefits and compensation vary by country and are subject to local law and any applicable collective bargaining agreements; full details are shared during the application process.

The company is committed to an inclusive workplace and diverse teams.

Benefits

• You may be eligible for a performance-based bonus, depending on certain performance parameters.
• Benefits in kind include insurance plans, retirement plans, wellbeing resources, and global recognition programs.
• Flexible and hybrid working is offered where possible.
• Minimum 14 weeks of paid parental leave.