Technical Project Manager – DevSecOps

Responsibilities • Lead the end-to-end delivery of DevSecOps and Secure SDLC initiatives, embedding security controls across all stages of the software development lifecycle. • Define and manage project scope, objectives, deliverables, timelines, resources, budgets, risks, and dependencies. • Coordinate cross-functional teams including engineering, application development, security, architecture, infrastructure, operations, procurement, vendors, and business stakeholders. • Drive the implementation and integration of security controls within CI/CD pipelines and cloud-native development environments. • Oversee project governance, risk management, issue resolution, dependency tracking, and change management across multiple workstreams. • Support the adoption of secure development practices, including threat modeling, secure design reviews, vulnerability management, and application security controls. • Ensure effective implementation of DevSecOps tooling, Infrastructure-as-Code, Policy-as-Code, container security, and cloud security solutions. • Monitor project progress and provide clear status updates, dashboards, reports, and executive summaries to senior leadership. • Ensure projects are delivered on time, within budget, and in alignment with organizational security and business objectives. • Translate complex technical requirements into clear business outcomes and actionable project plans. • Foster collaboration across technical and non-technical teams and proactively resolve project challenges and blockers. Requirements • Bachelor's degree in Computer Science, Information Technology, Engineering, or a related discipline. • Minimum 8 years of overall IT experience, including at least 3 years of technical project management experience. • Experience in managing cybersecurity, DevSecOps, Secure SDLC, cloud security, or application security initiatives. • Preferably experienced in the Financial Services, Banking, or Asset Management industry. • Strong hands-on understanding of Secure SDLC and integrating security controls into software development processes. • Experience with CI/CD tools such as GitLab CI, GitHub Actions, Jenkins, or similar platforms. • Knowledge of container technologies and orchestration platforms, including Docker and Kubernetes, along with associated security practices. • Experience with Infrastructure-as-Code tools such as Terraform, CloudFormation, or similar technologies. • Familiarity with Policy-as-Code frameworks such as Open Policy Agent (OPA). • Strong understanding of application security principles, including OWASP Top 10, secure coding practices, and cryptography fundamentals. • Knowledge of AWS and/or Azure cloud security services and cloud-native security architectures. • Familiarity with AWS Well-Architected Framework and cloud security tools such as AWS Security Hub, GuardDuty, CloudTrail, and Microsoft Sentinel. • Understanding of Cloud Security Posture Management (CSPM), supply-chain security, SBOM, SLSA, and artifact signing. • Experience with threat modeling, secure architecture and design reviews, risk assessments, and vulnerability management. • Strong technical acumen combined with structured project planning, governance, and delivery management skills. • Proven ability to manage multiple stakeholders, cross-functional teams, vendors, risks, budgets, and competing priorities. • Excellent communication, presentation, stakeholder management, and leadership skills. • Ability to influence technical and business teams without direct authority. • PMP, Agile, Cybersecurity, DevSecOps, AWS, Azure, or other relevant cloud/security certifications will be an advantage. #J-18808-Ljbffr