Responsibilities

Lead the end-to-end delivery of DevSecOps and Secure SDLC initiatives, embedding security controls across all stages of the software development lifecycle.
Define and manage project scope, objectives, deliverables, timelines, resources, budgets, risks, and dependencies.
Coordinate cross-functional teams including engineering, application development, security, architecture, infrastructure, operations, procurement, vendors, and business stakeholders.
Drive the implementation and integration of security controls within CI/CD pipelines and cloud-native development environments.
Oversee project governance, risk management, issue resolution, dependency tracking, and change management across multiple workstreams.
Support the adoption of secure development practices, including threat modeling, secure design reviews, vulnerability management, and application security controls.
Ensure effective implementation of DevSecOps tooling, Infrastructure-as-Code, Policy-as-Code, container security, and cloud security solutions.
Monitor project progress and provide clear status updates, dashboards, reports, and executive summaries to senior leadership.
Ensure projects are delivered on time, within budget, and in alignment with organizational security and business objectives.
Translate complex technical requirements into clear business outcomes and actionable project plans.
Foster collaboration across technical and non-technical teams and proactively resolve project challenges and blockers.

Requirements

Bachelor's degree in Computer Science, Information Technology, Engineering, or a related discipline.
Minimum 8 years of overall IT experience, including at least 3 years of technical project management experience.
Experience in managing cybersecurity, DevSecOps, Secure SDLC, cloud security, or application security initiatives.
Preferably experienced in the Financial Services, Banking, or Asset Management industry.
Strong hands-on understanding of Secure SDLC and integrating security controls into software development processes.
Experience with CI/CD tools such as GitLab CI, GitHub Actions, Jenkins, or similar platforms.
Knowledge of container technologies and orchestration platforms, including Docker and Kubernetes, along with associated security practices.
Experience with Infrastructure-as-Code tools such as Terraform, CloudFormation, or similar technologies.
Familiarity with Policy-as-Code frameworks such as Open Policy Agent (OPA).
Strong understanding of application security principles, including OWASP Top 10, secure coding practices, and cryptography fundamentals.
Knowledge of AWS and/or Azure cloud security services and cloud-native security architectures.
Familiarity with AWS Well-Architected Framework and cloud security tools such as AWS Security Hub, GuardDuty, CloudTrail, and Microsoft Sentinel.
Understanding of Cloud Security Posture Management (CSPM), supply-chain security, SBOM, SLSA, and artifact signing.
Experience with threat modeling, secure architecture and design reviews, risk assessments, and vulnerability management.
Strong technical acumen combined with structured project planning, governance, and delivery management skills.
Proven ability to manage multiple stakeholders, cross-functional teams, vendors, risks, budgets, and competing priorities.
Excellent communication, presentation, stakeholder management, and leadership skills.
Ability to influence technical and business teams without direct authority.
PMP, Agile, Cybersecurity, DevSecOps, AWS, Azure, or other relevant cloud/security certifications will be an advantage.

Technical Project Manager – DevSecOps