Senior Security Project Manager

The Security Project Manager leads the end-to-end delivery of complex information security initiatives, combining disciplined project management with sufficient technical security insight to challenge assumptions, manage dependencies and support informed decisions.

Reporting to the Head of Information Security Transformation, the role coordinates multidisciplinary teams, vendors and business stakeholders; maintains strong governance over scope, schedule, cost, risk and benefits; and facilitates the organisational change required for secure solutions to be adopted and sustained

Key Accountabilities and main responsibilities

Strategic Focus

• Lead security projects from initiation through delivery, transition and closure, establishing clear scope, objectives, milestones, dependencies, resources, budgets and measurable outcomes.
• Define and track delivery, adoption and risk-reduction measures to confirm intended benefits are realised.
• Build trusted relationships with sponsors, business owners, technology leaders, risk teams and operational stakeholders across multiple regions and time zones.
• Provide concise, evidence-based reporting on progress, cost, risk, decisions, benefits and matters requiring executive intervention.

Operational Management

• Develop and maintain delivery plans, governance forums, status reporting, decision logs and financial controls in accordance with enterprise project delivery standards.
• Facilitate technical workshops, design reviews, planning sessions and delivery stand-ups, translating complex security concepts into clear actions, decisions and stakeholder impacts.
• Work closely with security architects, engineers and technology teams to validate estimates, identify technical dependencies and ensure security requirements are incorporated into delivery plans and acceptance criteria.
• Manage vendors and delivery partners against agreed scope, milestones, quality, commercial commitments and remediation actions.
• Maintain budget forecasts, resource plans, procurement activities and project charging information, supporting accurate cost management and recovery.
• Coordinate testing, implementation, cutover, support arrangements, documentation, training and handover to operational owners.

People Leadership

• Coordinate multidisciplinary teams, vendors and business stakeholders, creating clarity on responsibilities, decisions and shared delivery outcomes.
• Assess stakeholder, process and technology impacts and develop proportionate change, communication, engagement and training plans.
• Facilitate adoption by engaging impacted teams early, addressing resistance, clarifying new responsibilities and tracking readiness and uptake.
• Recognise when specialist technical or risk advice is required and ensure the appropriate subject-matter experts are engaged at the right stage.

Governance & Risk

• Manage risks, issues, assumptions and dependencies, ensuring timely escalation, accountable ownership and transparent reporting to sponsors and governance forums.
• Control scope and change requests, balancing security outcomes, delivery constraints, cost, operational readiness and business priorities.
• Apply practical awareness of identity, cloud, data protection, network security, privileged access, security operations and regulatory controls to delivery planning and decision-making.
• Ensure go-live criteria, control evidence, residual risks and operational acceptance are documented and approved before closure.
• Capture lessons learned and improve security project templates, governance, reporting and delivery practices.

The above list of key accountabilities is not an exhaustive list and may change from time-to-time based on business needs.

Experience & Personal Attributes

Experience

• Relevant tertiary qualification in technology, cybersecurity, business or project management, or equivalent professional experience.
• Minimum 8+ years of project delivery experience, including responsibility for complex cybersecurity, infrastructure, cloud, identity, data protection or technology transformation initiatives.
• Demonstrated experience managing scope, schedule, budget, resources, risks, dependencies, vendors and benefits across multidisciplinary teams.
• Demonstrated experience planning and facilitating business change, stakeholder communications, training, operational readiness and adoption.
• Proficiency with project delivery and reporting tools such as Jira, ServiceNow, Microsoft Project, Excel, Confluence or equivalent platforms.
• Project management certification such as PMP, PRINCE2 or Agile delivery certification is preferred; change management certification such as Prosci is desirable.

Personal Attributes

• Strong facilitator who can create clarity, drive decisions and align technical and non-technical stakeholders around shared outcomes.
• Technically curious and able to ask informed questions, challenge constructively and translate security complexity into practical delivery implications.
• Highly organised, accountable and comfortable managing ambiguity, competing priorities and delivery pressure.
• Clear and concise communicator with sound judgement, strong commercial awareness and confidence engaging senior stakeholders.
• Collaborative and outcome-focused, with a commitment to sustainable change, effective governance and continuous improvement.