> Markdown version of [/jobs/ext/3846721-senior-it-risk-project-manager](https://www.wearedevelopers.com/jobs/ext/3846721-senior-it-risk-project-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior IT Risk Project Manager - **Company:** Luxoft Usa, Inc. - **Location:** Phoenix, AZ, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Software System Penetration Testing, Cyber Security, Data Governance, Information Leak Prevention, PRINCE2, Systems Development Life Cycle, Software Engineering, National Institute of Standards and Technology Cybersecurity Framework, Information Technology, Prompt Injection, CIS Benchmarks, Static Application Security Testing, Dynamic Application Security Testing - **Published:** October 20, 2026 - **Apply:** https://www.juju.com/job/23_E38B76418528CBC5EA78E8D8BB61F714 ## About the Role Project description Modernization as a Service (MaaS) is a cross-functional practice that supports all business verticals within the company.We are seeking a Senior IT Risk Project Manager to join our project for a leading US financial institution. Responsibilities Ensure successful delivery of projects Achieve financial targets Manage stakeholders' expectations Drive presales & business development activities People management activities Project manager activities: Pre-sale Contracting Project start Project Planning and Execution Team Management Self-management SKILLS Must have Core project management:- 7+ years of professional experience in software development projects and management 5+ years of experience in large scale Project/Program management Proven track record in complex projects with global, distributed teams People management experience for 20+ FTEs Good understanding of program financials and reporting Good understanding of project manager areas of responsibility:Project PlanningBacklog prioritization, detailing and decompositionUnderstanding of SDLC and ability to build/optimize project processesCommunication with the team, clientUnderstanding of motivation factorsTeam ManagementResult-orientedWorking with feedback: provide and receiveRisk management:- Demonstrable experience running IT risk, security, or compliance-driven programmes - not only feature delivery- Ability to build and maintain a risk register: identification, qualification, scoring, mitigation planning, ownership assignment, and escalation- Experience coordinating remediation programmes across multiple engineering teams (patching, vulnerability closure, control implementation) and tracking them to measurable closure- Comfortable operating with audit, InfoSec, and compliance stakeholders; experience preparing evidence and status for governance forums or steering committees- Working knowledge of at least one control or risk framework (NIST CSF/RMF, ISO 27001, CIS Controls, SOC 2, or similar)- Ability to translate technical findings into business impact and risk-based prioritization for senior stakeholdersSoft skills and education:- Verbal and written business communication skills- Presentation skills, including to executive and risk-committee audiences- Negotiation skills- Master's Degree in computer science or similar education- Certification advantage: PMP / PRINCE2 / SAFe, plus one of CISSP, CISM, CRISC, or CISA Nice to have Familiarity with security vulnerability management: CVE/CVSS, severity triage, SLA-based remediation cycles Exposure to penetration testing engagements - scoping, vendor coordination, findings review, retest tracking Understanding of AI/GenAI risk: model and data governance, AI risk scans and assessments, prompt injection and data leakage exposure, third-party AI tooling review Awareness of emerging AI governance and regulation (EU AI Act, NIST AI RMF) and how it lands on delivery teams Understanding of secure SDLC practices: SAST/DAST/SCA, dependency and supply chain risk, threat modelling