Job DescriptionSkills Required

NPrimary Skills: PM with Cyber Risk Management, Corporate Audit, Technology Services, QA, Development, Architecture

NExperience: 10+ years

NKey Responsibilities:

NCross-Functional Coordination:

NServe as the central point of accountability for project scope, schedule, budget, and risks

NCoordinate cross-functional teams (Development, DevOps, QA, Security, Audit, Operations)

NRun technical working groups and facilitate collaboration between technical and non-technical stakeholders

NEscalate blockers appropriately and remove impediments to project delivery

NSDLC & Quality Integration:

NIntegrate control objectives into the Software Development Life Cycle (SDLC) and CI/CD release pipelines

NDrive design changes, code fixes, configuration updates, automated tests, and regression testing to validate controls

NDrive continuous improvement in software quality practices including test automation, static/agile analysis, CI/CD quality gates, code review standards, and release governance

NGovernance & Reporting:

NEstablish and report key performance indicators (KPIs) and dashboards tracking remediation SLAs, defect escape rates, control effectiveness, and test coverage

NCommunicate status, blockers, and impact clearly to leadership and Governance/Risk/Compliance (GRC) stakeholders

NEnsure alignment with relevant GRC requirements and maintain up-to-date control mappings

NPrepare executive-level risk dashboards and metrics providing transparency into security posture

NRisk & Compliance Management:

NWork with GRC teams to assess and document security risks across products, applications, and systems

NCollaborate with remediation owners to develop and track resolution plans based on risk severity and business impact





NEnsure compliance with regulatory and industry obligations (PCI-DSS, SOC 2, ISO 27001, NIST CSF)

NCyber Remediation Leadership:

NLead end-to-end technicalproject management for cybersecurity remediation initiatives including vulnerabilities, misconfigurations, and control gaps

NEnsure timely, risk-prioritized delivery of remediation projects

NTranslate cyber requirements and control objectives into actionable workstreams, acceptance criteria, test plans, and measurable remediation steps

NCoordinate response and resolution of security incidents within defined SLAs

NMANDATORY SKILLS:

N5+ years of technical project/program management experience in an enterprise environment

NSDLC & DevOps:

NPractical experience withSoftware Development Life Cycle (SDLC)

NExperience with DevOps/CI/CD pipelines and automated testing practices

NUnderstanding of softwarequality engineering principles

NProject Management:

NProven ability to define scope, prioritize work, remove blockers, manage timelines, and report progress with concise metrics

NStrong stakeholder management and cross-functional leadership skills

NExperience running technical working groups and Agile ceremonies

NTools & Platforms:

NProficiency with ticketing and orchestration tools (JIRA, ServiceNow)

NExperience with GRC or vulnerability management platforms (Archer, Tenable, Qualys, Rapid7)

NFamiliarity with collaboration tools (Confluence, SharePoint, MS Teams)

NCybersecurity Expertise:

NHands-on understanding ofsecurity vulnerabilities, remediation processes, and common mitigation patterns (patching, configuration changes, secure coding fixes)

NExperience with vulnerability management platforms and GRC tools

NKnowledge of security frameworks (NIST CSF, ISO/IEC 27001, CIS Controls)

📌 Project Manager + Cybersecurity (Faridabad)
🏢 Sonata Software
📍 Faridabad