Cybersecurity Project Manager

Note:

• Must be flexible to take on different projects - being hired for the role below, but things could change...needs to be ok with that
• 10yrs in cyber security
• Must be a true project manager, not looking for an engineer
• Must have project experience in: IAM, pen testing, detection engineering
• Must be able to explain how they tracked the remediation of the project from completion to analysis
• Exposure to SAP (not just as a user of the tool) would be the perfect profile à this is NOT the focus and NOT a must
• Must have excellent communication

Project Leadership & Delivery (60%)

• Lead delivery of SAP cybersecurity initiatives, including IAM, SailPoint, SAP GRC, penetration testing, integration security, monitoring, and platform security.
• Manage project scope, schedule, budget, risks, dependencies, remediation activities, and governance.
• Coordinate Cybersecurity, SAP, Infrastructure, Architecture, Audit, vendor, and business stakeholders.
• Drive execution of security assessments, testing, remediation, and go-live readiness activities.
• Manage multiple concurrent cybersecurity projects and support project recovery efforts.

Security Readiness & Business Analysis (20%)

• Gather and document business, technical, and cybersecurity requirements.
• Coordinate security reviews, control validations, penetration testing, and readiness assessments.
• Track remediation activities, risk acceptances, security approvals, and overall readiness status.
• Facilitate stakeholder alignment and resolution of project issues and dependencies.

Governance, Reporting & Project Controls (20%)

• Maintain project plans, RAID logs, action items, status reports, budgets, and governance artifacts.
• Provide clear reporting on project status, cybersecurity readiness, risks, and key milestones.
• Ensure documentation is accurate, complete, audit-ready, and compliant with PMO standards.

Qual:

• 10+ years in cybersecurity with strong project/program management experience.
• Strong IAM knowledge is the #1 priority. They need to understand identity/access concepts and be able to manage IAM-related projects.
• Experience managing penetration testing and remediation, including tracking findings through closure.
• Experience supporting security reviews of integrations, not just general cybersecurity projects.
• Understanding of GRC as it relates to integrations, controls, risks, and remediation.
• Exposure to detection engineering/security monitoring initiatives and the remediation coming out of them.
• Strong analysis/BA background is highly valuable because they'll need to understand findings, requirements, dependencies, and remediation rather than simply maintain a project plan.
• Proven ability to manage multiple security projects at once, transition between initiatives, and take ownership based on where support is most needed.
• Familiarity with Agile delivery.

Nice-to-haves

• SailPoint experience is a strong plus, but don't eliminate someone because they've worked with another enterprise IAM platform.
• SAP experience is NOT required. I would specifically tell recruiters not to screen someone out for lacking SAP.
• Greenfield SAP experience definitely isn't necessary.

Ideal Profile


Senior Cybersecurity PM / BA with 10+ years of cybersecurity experience and deep familiarity with IAM. Must have managed security initiatives involving integrations, penetration testing, remediation tracking, security reviews, and/or GRC. Looking for someone who understands the substance behind the security work, not just a PM who tracks dates and schedules. SailPoint is a plus; SAP is not required.