Sr. Project Manager – Cybersecurity GRC & OT Security

Sr. Project Manager – Cybersecurity GRC & OT Security

Summary
We are seeking a Senior Project Manager to lead global cybersecurity governance, risk, compliance, and operational resilience initiatives.  This PM will establish consistent processes across regions while coordinating work with local teams and manufacturing sites.  The primary initiatives are rolling out a global third-party risk assessment process, planning and facilitating business continuity and disaster recovery exercises, and coordinating operational technology (OT) security assessments across manufacturing locations.
Responsibilities

• Lead the development and rollout of a repeatable third-party risk assessment process for critical and new vendors, applications, and services.
• Bring together Cyber Security, Procurement, Legal, Privacy, Technology, and Business teams to define intake, risk tiers, due diligence, approvals, and reporting.
• Coordinate vendor assessments, evidence reviews, findings, remediation plans, exceptions, and residual-risk decisions.
• Plan and facilitate business continuity and disaster recovery exercises including tabletop, simulated, and technical recovery exercises.
• Document exercise outcomes, control gaps, lessons learned, and remediation actions and then track those actions through closure.
• Partner with the OT Security Lead to coordinate security assessments at manufacturing sites including schedules, site workshops, evidence collection, findings, and reports.
• Help translate OT assessment findings into practical, risk-based remediation plans that account for plant operations.
• Maintain integrated plans, budgets, risk and issue logs, decision records, governance meetings, and executive reporting across the initiatives.
• Establish common templates, documentation standards, metrics, and handoff materials so operational teams can sustain the processes.

Requirements

• At least 7 years of project or program management experience, including substantial delivery work in information security, risk, compliance, or operational resilience.
• Experience implementing or improving a third-party risk management or vendor security assessment process.
• Experience planning and facilitating business continuity, disaster recovery, cyber incident, or operational resilience exercises.
• Experience coordinating OT security, cybersecurity, or technology-risk assessments in manufacturing plants or industrial environments.
• Working knowledge of security governance, risk assessments, control evidence, residual-risk acceptance, and remediation tracking.
• Strong process documentation, workshop facilitation, stakeholder management, executive reporting, and written communication skills.
• Ability to coordinate global and regional teams across time zones in a complex manufacturing environment.

Preferred

• PMP, PRINCE2, Certified Scrum Master, or equivalent project management certification.
• CISM, CRISC, CISSP, CBCP, ISO 22301, ISO 27001, or related security, risk, resilience, or audit credentials.
• Experience with OT security frameworks, GRC platforms, ServiceNow workflows, third-party assessment tools, or executive dashboards.