Security Project Manager

Technical Security Project Manager required for FTSE 100 company. The role will lead the end-to-end delivery of a PAM transformation programme, focused on vendor selection and implementation of a SaaS PAM solution to replace CyberArk across a large-scale Azure/AWS estate.Key Responsibilities & Deliverables

Discovery & Requirements

• Define stakeholder map, governance, and reporting cadence
• Lead requirements gathering across security, cloud, audit, and compliance
• Produce aligned requirements (NIST/CIS) and target operating model
• Initiate RAID log and audit/compliance engagement

Vendor Selection

• Design and run RFP process with structured evaluation criteria
• Manage vendor responses, demos, and scoring frameworks
• Lead POCs (success criteria, engineering coordination, technical validation)
• Produce vendor recommendation and maintain decision log

Commercial & Governance

• Drive procurement, contract negotiation, and vendor onboarding
• Ensure completion of Privacy Impact Assessment and Third-Party Security Assessment
• Coordinate security assurance and ensure regulatory alignment (eg NIS2)

Design, Build & Rollout

• Oversee solution design (Entra ID integration, connectivity, architecture)
• Govern pilot deployment (acceptance criteria, testing, go/no-go)
• Manage mass rollout across Azure estate with progress tracking and reporting
• Ensure stable parallel run with CyberArk and defined rollback plan
• Define migration readiness and acceptance criteria

Readiness & Enablement

• Deliver training, runbooks, and operational documentation
• Produce CyberArk decommission and migration plan
• Manage stakeholder and end-user communications
• Deliver readiness reporting and facilitate go/no-go gate reviews

Migration Readiness & Closure

• Ensure platform is live, stable, and ready for migration
• Deliver audit evidence and confirm compliance closure
• Complete project handover (docs, RAID, decision log)
• Produce final closure report and formally close project

• Delivery of PAM/IAM or security transformation programmes
• Strong experience in RFP, vendor selection, and POC delivery
• Cloud environments (Azure/AWS)
• Security frameworks (NIST, CIS, NIS2)
• Stakeholder, governance, and audit/compliance management

Barclay Simpson acts as an Employment Agency for permanent positions and an Employment Business for temporary/contract engagements.