Senior IT Risk Project Manager

Core project management:

7+ years of professional experience in software development projects and management

5+ years of experience in large scale Project/Program management

Proven track record in complex projects with global, distributed teams

People management experience for 20+ FTEs

Good understanding of program financials and reporting

Good understanding of project manager areas of responsibility:

Project Planning

Backlog prioritization, detailing and decomposition

Understanding of SDLC and ability to build/optimize project processes

Communication with the team, client

Understanding of motivation factors

Team Management

Result-oriented

Working with feedback: provide and receive

Risk management:

Demonstrable experience running IT risk, security, or compliance-driven programmes

not only feature delivery

Ability to build and maintain a risk register: identification, qualification, scoring, mitigation planning, ownership assignment, and escalation

Experience coordinating remediation programmes across multiple engineering teams (patching, vulnerability closure, control implementation) and tracking them to measurable closure

Comfortable operating with audit, InfoSec, and compliance stakeholders; experience preparing evidence and status for governance forums or steering committees

Working knowledge of at least one control or risk framework (NIST CSF/RMF, ISO 27001, CIS Controls, SOC 2, or similar)

Ability to translate technical findings into business impact and risk-based prioritization for senior stakeholders

Soft skills and education:

Verbal and written business communication skills

Presentation skills, including to executive and risk-committee audiences

Negotiation skills

Master's Degree in computer science or similar education

Certification advantage: PMP / PRINCE2 / SAFe, plus one of CISSP, CISM, CRISC, or CISA

Familiarity with security vulnerability management: CVE/CVSS, severity triage, SLA-based remediation cycles

Exposure to penetration testing engagements

scoping, vendor coordination, findings review, retest tracking

Understanding of AI/GenAI risk: model and data governance, AI risk scans and assessments, prompt injection and data leakage exposure, third-party AI tooling review

Awareness of emerging AI governance and regulation (EU AI Act, NIST AI RMF) and how it lands on delivery teams

Understanding of secure SDLC practices: SAST/DAST/SCA, dependency and supply chain risk, threat modelling