Senior Project Manager, Information Security

Lead the Information Security project management team, covering programs across all security sub-teams.

• Own portfolio tracking, quarterly OKRs and the monthly program status report to senior leadership, with clear owners, dates, risks and asks, backed by data.
• Drive cross-team programs end to end: plan milestones, manage dependencies and secure committed dates from engineering, IT and business partners.
• Define clear ownership and accountability for cross-team programs, so every deliverable has a named owner.
• Coordinate compliance and audit programs such as SOC 2, PCI DSS, ISO 27001 and MAS TRM, including control owners, evidence, timelines and remediation of findings.
• Track red-team, penetration-test and vulnerability findings to closure across security and engineering teams.
• Run program cadences, challenge unrealistic timelines with facts, risk and priority, and escalate early with options and a clear ask.
• Improve project management processes, trackers and dashboards, using automation and AI to reduce manual follow-up.

• At least 5 years of full time project or program management, including at least 2 years leading a team of project managers.
• Proven delivery of complex, multi-team programs in information security, infrastructure, cloud or IT risk.
• Hands-on experience with at least one external audit or certification, such as SOC 2, PCI DSS, ISO 27001 or a financial regulator's technology risk review.
• Strong stakeholder management across cultures and time zones, persistent in driving commitments while keeping relationships strong.
• Able to run many programs in parallel and make clear priority trade-offs.
• Working knowledge of security and infrastructure concepts, and a structured, data-driven way of working.
• PMP, PgMP, CISA, CISM or CISSP certification, experience in banking or other regulated industries are a plus.