Cybersecurity Project Manager

The Cybersecurity Project Manager leads the end-to-end delivery of cybersecurity service projects, with a primary focus on security testing services such as Penetration Testing (PT) and Vulnerability Assessment (VA), within the agreed scope, timeline, budget, and quality standards. This role plans and allocates Pentest resources across projects, leads the delivery team, and serves as the primary point of contact for customers. With strong technical knowledge, the role provides credible advice to customers and technical guidance to the Pentest team, while proactively solving problems to ensure project success and customer satisfaction.

Project Planning & Delivery

• Plan, manage, and control cybersecurity projects (PT, VA, and related security testing services) from kick-off to closure, within the agreed scope, timeline, budget, and quality standards.

• Define project activities, milestones, deliverables, and responsibilities, and manage scope changes through a formal change request process.

• Prepare project status reports, meeting minutes, and management reports, and provide timely updates to management.

• Manage project closure, including final delivery, customer acceptance, lessons learned, and documentation in line with company standards.

Resource Allocation & Team Leadership

• Plan and allocate Pentest and VA engineers to projects based on skills, workload, availability, and project priority, and resolve resource conflicts across concurrent projects.

• Forecast resource demand based on the project pipeline and upcoming workload, and propose capacity plans to management, including additional hiring, cross-training, or outsourcing when required.

• Supervise, coach, and mentor the Pentest team, and provide technical guidance on testing approach, methodology, and findings.

• Monitor team performance and workload, and provide input on performance evaluation and skill development.

Technical Oversight & Quality

• Review PT and VA reports for technical accuracy, risk rating, completeness, and professional presentation before delivery to customers.

• Ensure testing follows recognized methodologies and standards (e.g., OWASP, PTES, NIST, CVSS) and the agreed rules of engagement.

• Ensure confidentiality and secure handling of customer data, test results, and vulnerability information.

Problem Solving & Risk Management

• Identify project risks, issues, and delays early, analyze root causes, and drive practical solutions; escalate to management when needed.

• Maintain risk registers, issue logs, and action items, and follow up until resolution.

Customer Engagement & Consultation

• Act as the main point of contact for customers throughout the project lifecycle, managing expectations and building trust.

• Explain technical findings, business impact, and remediation recommendations clearly to both technical and non-technical stakeholders.

• Provide consultation on cybersecurity, risk management, and security best practices, and support pre-sales with scoping, effort estimation, and proposals when required.

• Perform other related duties as assigned by the supervisor.

Required Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.

• At least 5 years of experience in project management, including at least 3 years managing cybersecurity service projects such as Penetration Testing, Vulnerability Assessment, or Security Assessment.

• Project management experience must be in cybersecurity delivery. Experience limited to software development, general IT infrastructure, or GRC/compliance projects will not be considered equivalent.

• Experience in cybersecurity solution implementation projects (e.g., Firewall, SIEM, EDR) may be considered; however, direct experience managing security testing projects (PT/VA) is strongly preferred.

• Experience leading or supervising a technical team, including resource planning and work allocation across multiple projects.

• Solid technical understanding of PT and VA (web application, mobile, network, and infrastructure), common vulnerabilities (e.g., OWASP Top 10), and security testing tools (e.g., Burp Suite, Nmap, Nessus).

• Strong knowledge of project management methodologies, techniques, and tools (e.g., MS Project, Jira).

• Strong problem-solving and decision-making skills, with the ability to manage multiple projects under tight deadlines.

• Excellent communication and presentation skills in Thai and English, with the ability to communicate credibly with customers, management, and technical teams.

Preferred Qualifications

• Hands-on experience as a Penetration Tester or Security Consultant.

• Professional certifications such as PMP or PRINCE2, and/or OSCP, CEH, CISSP, CISM, or ISO/IEC 27001 Lead Auditor/Implementer.

• Knowledge of ISO/IEC 27001, NIST CSF, PDPA, the Thailand Cybersecurity Act, and industry regulations (e.g., BOT, SEC, OIC).