Project Manager, Information Security

Description

This is a delivery-focused project manager role in the global Information Security group, leading security technology initiatives from planning through to handover across teams worldwide.

The company is putting new security platforms in place to protect its global staff, a large group of software developers, and a growing set of acquired businesses. Delivering these on schedule and getting them actually used takes project leadership across many teams, regions and functions.

Sample work includes rolling out a platform that finds security weaknesses in applications across development teams, and widening secure web gateway and zero-trust access so staff can connect safely to apps and the internet.

Other work may cover cloud security for acquired environments, data discovery and classification, and bringing newly acquired companies into the security program.

You will work alongside Security Architecture, Application Security, Cloud Security, Security Operations, IAM, infrastructure and networking, end-user computing, procurement and development teams across business units and regions.

The role suits someone technically fluent, who understands security well enough to talk with engineers and architects and can turn technical work into plans and messages for leaders and end users.

Responsibilities

• Define scope, goals, milestones, resourcing and success measures for technical security projects with sponsors and technical leads, then run each project from start to close.
• Build and maintain integrated plans and schedules, tracking dependencies across security, infrastructure, networking and application teams to hold committed dates.
• Steer platform rollouts that rely on developers adopting them, covering onboarding waves, source code and CI/CD integration, and follow-up with engineering teams to raise coverage and use.
• Run workforce rollouts through pilots, phased waves, regional sequencing, rollback plans and go/no-go decisions.
• Lead change work for end-user rollouts, including communications plans, user guides, training and service desk readiness, with end-user computing and communications teams.
• Maintain RAID logs, spot delivery risks early, and drive mitigation and escalation until each one is resolved.
• Track budgets, purchase orders, and vendor deliverables and milestones with procurement and finance, and raise any variances to sponsors.
• Coordinate vendors and professional services partners on implementation plans, statements of work and delivery milestones.
• Prepare steering committee and leadership materials covering status, decisions needed, risks and recommendations.
• Maintain portfolio reporting for Information Security projects, showing status, health, resourcing and upcoming milestones.
• Support acquisition-related projects by coordinating security integration, extending platform coverage to acquired environments, and aligning timelines with wider integration programs.
• Coordinate cross-functional data security work, such as discovery and classification deployments, with data owners, platform teams, Privacy and Legal.
• Manage work in Jira, Confluence and ServiceNow, keeping plans, documentation and change records accurate and aligned with the company's change management process.
• Record lessons learned and help improve delivery practices, templates and standards for Information Security projects.

Requirements

• 5, 7 years of professional experience, including at least 3 years managing technical, infrastructure or IT projects in a global or matrixed setting.
• A proven record of delivering projects end to end: planning, scheduling, managing dependencies, risks and issues, and closing projects.
• A working grasp of security topics such as application security, network and web security, zero-trust access, cloud security and data protection, enough to engage engineers and architects.
• Experience coordinating technical deployments across several teams, such as infrastructure, networking, cloud, application development and end-user computing.
• Experience running enterprise rollouts that affect users, including pilots, phased deployments, communications and service desk readiness.
• Experience tracking budgets, purchase orders and vendor deliverables with procurement and finance teams.
• Experience preparing steering committee and executive status reports that present risks, decisions and trade-offs clearly and concisely.
• Hands-on use of Jira, Confluence and ServiceNow for project tracking, documentation and change management.
• Stakeholder management skills that build alignment across technical teams, business stakeholders and vendors without direct authority.
• Strong written and spoken English, and the ability to work effectively across a global, matrixed organization.
• Preferred: background in security projects, such as security platform deployments, network security transformations or M&A integration.
• Advantage: experience in healthcare, life sciences or other regulated environments.
• Preferred: bachelor's degree in Computer Science, Information Systems, Business or equivalent practical experience.
• Preferred: PMP, PRINCE2 or Scrum/Agile certification.

Conditions

Applications must be truthful and complete, and the company is committed to equal opportunity between women and men.