PMO Manager - Security & GRC

Accountabilities:

Establish, administer, and continuously improve the project management framework, including processes, tools, templates, governance standards, and reporting practices for security and GRC initiatives.
Manage the full project lifecycle across portfolios, programs, and individual projects, ensuring alignment with strategic objectives, defined scope, budgets, timelines, and expected outcomes.
Evaluate proposed initiatives, define project scope, develop and maintain business cases, identify stakeholders, gather requirements, establish milestones, and create comprehensive project plans.
Coordinate project execution across corporate security and GRC teams and business units, including Global Products, Healthcare, Education, and Digital, ensuring effective collaboration and alignment.
Monitor project performance, milestones, deadlines, resource allocation, budgets, dependencies, issues, and risks, taking proactive action to address obstacles and maintain delivery commitments.
Identify project blockers, delivery risks, process inefficiencies, and opportunities for optimization, escalating critical issues and facilitating timely resolution.
Develop and maintain project management metrics, status reports, dashboards, and executive-level presentations that provide clear visibility into the progress, performance, and health of ongoing initiatives.
Drive accountability across project teams by communicating expectations, following up on commitments, tracking deliverables, and ensuring stakeholders remain aligned throughout project execution.
Incorporate fundamental cybersecurity and GRC principles into project planning and delivery, helping ensure that security and compliance requirements are integrated from the beginning rather than added after implementation.
Build and maintain productive relationships with senior leaders, project managers, technical specialists, subject matter experts, and business stakeholders across the organization.
Facilitate communication across functions, teams, and time zones, ensuring project information is clearly documented, decisions are communicated, and dependencies are effectively managed.
Apply appropriate project management methodologies, including Agile and Waterfall approaches, to support different project requirements and delivery environments.
Support security audits, compliance initiatives, and the implementation of security best practices across geographic regions and functional areas.
Identify opportunities to automate project management processes, streamline reporting, improve resource utilization, and strengthen overall delivery efficiency.
Translate complex technical information into clear business implications and actionable recommendations for senior management and other stakeholders.
Requirements:
Bachelor's degree in a relevant discipline is required, along with a recognized project management certification, such as Project Management Professional (PMP), or an advanced academic degree in project management. Agile certifications are an advantage.
At least 5 years of relevant experience in project or program management, preferably within a large organization or consulting environment.
Demonstrated experience managing portfolios, programs, and projects of varying size and complexity, including security initiatives, audits, and the implementation of security best practices across multiple geographies and business functions.
Strong knowledge of established project management methodologies and frameworks, such as PMBOK or PRINCE2, with the ability to apply structured governance and delivery practices.
Working knowledge of information security, cybersecurity fundamentals, governance, risk management, and compliance principles.
Practical experience with Agile and Waterfall delivery methodologies, including a strong understanding of frameworks and practices such as SAFe, Scrum, Kanban, or Lean.
Proficiency with project management and collaboration tools such as Smartsheet, Microsoft Project, SharePoint, Azure DevOps (ADO), or comparable platforms.
Strong planning, organizational, and prioritization skills, with the ability to manage multiple initiatives, coordinate dependencies, monitor budgets, and deliver results within established deadlines.
Excellent analytical and problem-solving capabilities, including the ability to assess project data, identify trends and risks, and present information in a format that supports senior-level decision-making.
Outstanding written, verbal, interpersonal, and presentation skills, with the ability to communicate effectively with both technical and business audiences.
Demonstrated ability to build relationships, influence stakeholders, promote accountability, and coordinate cross-functional teams without relying solely on formal authority.
Ability to absorb complex technical information quickly, adapt to changing priorities, and operate effectively in a dynamic, evolving environment.
A customer-oriented, resourceful, proactive, and collaborative approach to project delivery and stakeholder support.
Flexibility to accommodate meetings and collaboration outside standard business hours when required to work across time zones.
Professional security certifications such as CISM, CRISC, CISSP, or equivalent credentials are preferred.
Deeper knowledge of security and GRC domains, including network and cloud security, information risk management, privacy, regulatory compliance, vulnerability management, data loss prevention (DLP), endpoint security, security operations centers (SOC), and third-party risk management, is an advantage.
Experience in process automation, workflow optimization, and continuous improvement initiatives is desirable.
Benefits:
Competitive base salary: Estimated annual base salary ranging from $140,000 to $190,000, depending on experience, skills, certifications, and other relevant factors.
Annual incentive compensation: Eligibility for a performance-based annual incentive program, with estimated total compensation—including base salary and annual incentive opportunity—ranging from $168,000 to $228,000.
Comprehensive healthcare: Medical, dental, and vision coverage for eligible employees and their dependents.
Retirement savings: Access to a 401(k) plan with employer contributions to support long-term financial planning.
Employee stock purchase plan: An opportunity to participate in an employee stock purchase program, subject to applicable eligibility requirements.
Paid time off: A generous paid leave policy to support work-life balance and personal well-being.
Paid parental leave and adoption assistance: Programs designed to support employees and families through important life events.
Wellness programs: Access to health and well-being initiatives, including annual health assessments, coaching, workshops, and additional employee support programs.
Remote work arrangement: A remote position offering flexibility while supporting collaboration with teams and stakeholders across different locations.
Professional development: Opportunities to strengthen project management expertise, deepen cybersecurity and GRC knowledge, and expand leadership capabilities.
Strategic influence: The opportunity to shape enterprise project governance, improve security program delivery, and contribute to organization-wide risk management and compliance initiatives.
Collaborative culture: Work with multidisciplinary teams and senior leaders in an environment focused on innovation, continuous learning, accountability, and sustainable business outcomes.