Senior IT Risk Project Manager

Ensure successful delivery of projects

• Achieve financial targets
• Manage stakeholders’ expectations
• Drive presales & business development activities
• People management activities
• Project manager activities:
• Pre-sale
• Contracting
• Project start
• Project Planning and Execution
• Team Management
• Self-management

• 7+ years of professional experience in software development projects and management
• 5+ years of experience in large scale Project/Program management
• Proven track record in complex projects with global, distributed teams
• People management experience for 20+ FTEs
• Good understanding of program financials and reporting
• Good understanding of project manager areas of responsibility:
• Project Planning
• Backlog prioritization, detailing and decomposition
• Understanding of SDLC and ability to build/optimize project processes
• Communication with the team, client
• Understanding of motivation factors
• Team Management
• Result-oriented
• Working with feedback: provide and receive
• Risk management:
• Demonstrable experience running IT risk, security, or compliance-driven programmes
• not only feature delivery
• Ability to build and maintain a risk register: identification, qualification, scoring, mitigation planning, ownership assignment, and escalation
• Experience coordinating remediation programmes across multiple engineering teams (patching, vulnerability closure, control implementation) and tracking them to measurable closure
• Comfortable operating with audit, InfoSec, and compliance stakeholders; experience preparing evidence and status for governance forums or steering committees
• Working knowledge of at least one control or risk framework (NIST CSF/RMF, ISO 27001, CIS Controls, SOC 2, or similar)
• Ability to translate technical findings into business impact and risk-based prioritization for senior stakeholders
• Soft skills and education:
• Verbal and written business communication skills
• Presentation skills, including to executive and risk-committee audiences
• Negotiation skills
• Master’s Degree in computer science or similar education
• Certification advantage: PMP / PRINCE2 / SAFe, plus one of CISSP, CISM, CRISC, or CISA

Nice to have

• Familiarity with security vulnerability management: CVE/CVSS, severity triage, SLA-based remediation cycles
• Exposure to penetration testing engagements
• scoping, vendor coordination, findings review, retest tracking
• Understanding of AI/GenAI risk: model and data governance, AI risk scans and assessments, prompt injection and data leakage exposure, third-party AI tooling review
• Awareness of emerging AI governance and regulation (EU AI Act, NIST AI RMF) and how it lands on delivery teams
• Understanding of secure SDLC practices: SAST/DAST/SCA, dependency and supply chain risk, threat modelling