Senior IT Risk Project Manager

Modernization as a Service (MaaS) is a cross-functional practice that supports all business verticals within the company., Ensure successful delivery of projects

• Achieve financial targets

• Manage stakeholders’ expectations

• Drive presales & business development activities

• People management activities

• Project manager activities:

1. Pre-sale

2. Contracting

3. Project start

4. Project Planning and Execution

7+ years of professional experience in software development projects and management

• 5+ years of experience in large scale Project/Program management

• Proven track record in complex projects with global, distributed teams

• People management experience for 20+ FTEs

• Good understanding of program financials and reporting

• Good understanding of project manager areas of responsibility:

Project Planning

Backlog prioritization, detailing and decomposition

Understanding of SDLC and ability to build/optimize project processes

Communication with the team, client

Understanding of motivation factors

Team Management

Result-oriented

Working with feedback: provide and receive

Risk management:

• Demonstrable experience running IT risk, security, or compliance-driven programmes - not only feature delivery

• Ability to build and maintain a risk register: identification, qualification, scoring, mitigation planning, ownership assignment, and escalation

• Experience coordinating remediation programmes across multiple engineering teams (patching, vulnerability closure, control implementation) and tracking them to measurable closure

• Comfortable operating with audit, InfoSec, and compliance stakeholders; experience preparing evidence and status for governance forums or steering committees

• Working knowledge of at least one control or risk framework (NIST CSF/RMF, ISO 27001, CIS Controls, SOC 2, or similar)

• Ability to translate technical findings into business impact and risk-based prioritization for senior stakeholders

Soft skills and education:

• Verbal and written business communication skills

• Presentation skills, including to executive and risk-committee audiences

• Negotiation skills

• Master’s Degree in computer science or similar education

• Certification advantage: PMP / PRINCE2 / SAFe, plus one of CISSP, CISM, CRISC, or CISA

Nice-to-Have Skills Description:

• Familiarity with security vulnerability management: CVE/CVSS, severity triage, SLA-based remediation cycles

• Exposure to penetration testing engagements - scoping, vendor coordination, findings review, retest tracking

• Understanding of AI/GenAI risk: model and data governance, AI risk scans and assessments, prompt injection and data leakage exposure, third-party AI tooling review

• Awareness of emerging AI governance and regulation (EU AI Act, NIST AI RMF) and how it lands on delivery teams

• Understanding of secure SDLC practices: SAST/DAST/SCA, dependency and supply chain risk, threat modelling