Senior Security Project Manager

AVEVA is a global leader in industrial software. Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life – such as energy, infrastructure, chemicals and minerals – safely, efficiently and more sustainably.

We’re the first software business in the world to have our sustainability targets validated by the SBTi, and we’ve been recognized for the transparency and ambition of our commitment to diversity, equity, and inclusion. We’ve also recently been named as one of the world’s most innovative companies.

If you’re a curious and collaborative person who wants to make a big impact through technology, then we want to hear from you! Find out more at AVEVA Careers.

For more information about our privacy policy and how to manage cookies, visit our Privacy Policy.

Job Name: Senior Security Project Manager

Organization/department: Digital Security

Reports to: Programme Manager – Global Security Operations

Location: Kuala Lumpur, Malaysia and London, United Kingdom

Job Overview

The Senior Security Project Manager is a seasoned professional responsible for overseeing and managing complex, high-impact Digital Security projects within AVEVA. This role works to ensure the team’s success in delivery, primarily by helping to identify and especially remove impediments impacting the team’s ability to deliver approved Digital Security controls / services to meet operational and strategic transformation objectives using appropriate behaviours, techniques, and frameworks.

Roles and Responsibilities

Dimensions

• Demonstrated history of successful project delivery in a waterfall and agile environment, especially in projects related to Information and Cyber Security
• Strong planning skills – schedules, resource allocation, issue management, tracking, etc.
• Stakeholder engagement with strong interpersonal and collaborative skills as well as highly effective communication skills
• Situational Leadership
• Strong motivation, initiative and able to multi-task
• Formal Agile, Scrum and/or Project Management training

Primary Duties

• Analyse the strategic objectives and select, implement appropriate project management methodology and framework (Agile / Waterfall, Scrum, Safe etc.)
• Lead and manage delivery team/s to successfully deliver all key milestones and product outcomes within scope, on time, on budget and to expected standards
• Manage and develop stakeholder relationships including steering committees, through effective communications, documentation, negotiation, and issues management to ensure delivery of security controls and the achievement of outcomes and benefits such as enhanced security posture, risk reduction etc.
• Derive and felicitate all project governance meetings, regular “Sprint Ryhthm” as applicable
• Proactively identifies and helps to resolve issues that impact achievement of team’s project deliverables or sprint commitments
• Report and escalate issues such as variances and manage delivery by exception to ensure issues are understood and resolution actions, owners identified
• Develop strategies for the continuous monitoring, evaluation and improvement of all aspects of control delivery including but not limited to, analysis of customer feedback, facilitation of agile meetings and artefact production, identification and mitigation of risks
• Support the delivery of all governance materials, artefacts and meetings to ensure security controls are delivered and maintained as per AVEVA Digital Security standards
• Ensures the delivery team is fully functional, cooperating, and productive
• Shields the delivery team from external interferences and removes obstacles
• Administers and manages business relationships with the project’s external consultants and third parties ensuring they meet their project objectives
• Suggests and implements improvements to project management, security control deployments and other organizational processes
• Continues engagement with the Digital Security Control Owner and Control Operator, provides the project team a concise vision and creates a positive team environment
• Service Strategy, Delivery and Continues Service Improvement (Service Design, Service Transition and Service Operation)
• Define and monitor service SLAs/KPIs
• Client engagement (SPOC for internal and external clients) and facilitate campaigns
• Establish good working relationships with internal and external stakeholders, third party suppliers, Auditors etc.

Important Working Relationships

• Program, Project and Delivery Stakeholders (Control Owners, Control Operations etc.)
• Business Units (IT, Legal, Finance, Product, R&D, Global Customer Services, Delivery Services etc.)
• Enterprise Architecture and Security Architecture teams
• Security and IT Governance, Risk and Compliance Teams
• Human Centric Security and Workplace Management Teams
• IT Business Relationships Managers and Product Line Heads
• Business Analysts and other Delivery Leads
• IT Platforms and Operations team as relevant to projects
• External suppliers and service providers

Required Qualifications:

Educational Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cyber Security, Engineering or a related field (Master's degree preferred)
• Project Management training and certifications such as PMP, APM, CSM, Prince II or equivalent is preferred
• Knowledge and extensive experience with project management methodologies (e.g., Agile, Scrum, Waterfall).
• Exceptional leadership, communication, and negotiation skills.
• Proficiency in project management software and tool such as Microsoft Project, Azure DevOps, Trello, JIRA etc.
• Strong analytical and strategic thinking capabilities

Experience

• 5+ years of experience in IT and Cyber Security project management, with a demonstrated history of handling large-scale, high-impact projects.
• Extensive experience of project management methodologies and frameworks (PMI, Agile, Scrum, Safe, PRINCE II etc.)
• Demonstrated experience managing project managers and leading cross-functional delivery teams

Technical Competency

• In-depth knowledge of IT infrastructure and Cyber Security domains
• Understanding of Cyber Threat Detect and Response capabilities and services, Data and Network Security, Vulnerability Management, Identity and Access Management capabilities is desired
• Understanding of Leading Internal Standards on Information and Cyber Security such as ISO27001, NIST Cyber Security Framework is desired
• Experience in delivery of SIEM tools such as Microsoft Sentinel, Splunk, QRadar etc.is a plus
• Extensive Knowledge of Project Planning Tools such as Microsoft Project, Azure DevOps, Trello, JIRA etc.
• Ability to lead and motivate others; demonstrating empathy and knowledge of personality types
• Demonstrated sensitivity to working in a political environment and to interacting with senior leadership.
• Exceptional verbal and written communication skills
• Expertise in setting and managing customer expectations
• Effective influencing and negotiating skills in an environment where this role may not directly control resources
• Strong knowledge and understanding of business needs, with the ability to establish and maintain a high level of customer trust and confidence
• Thorough understanding of current and emerging technologies and how other enterprises are employing them to drive digital business
• Demonstrated ability to develop and execute a project resource plan that ensures that the right people are in the right place doing the right things at the right time

Desirable Training and Certifications

Cyber Security Certifications such as CompTIA Security+, Certified Information Security Manager (CISM), Certified Information Security Professional (CISSP), Certified in Governance, Risk and Compliance (CGRC), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Auditor (CISA) is desired.

Occupational Personality

• Strong analytical and problem-solving skills with strong written and verbal communication and a good attention to detail
• Ability to work both independently and collaboratively as a team member, be curious and to ask questions and share knowledge.
• Ability to interact with AVEVA's personnel at all levels and across all business units and organizations, and to understand business objectives and values.
• A strong customer/client focus, with the ability to manage expectations appropriately, to provide a superior customer/client experience and build long-term relationships.
• A strong passion about security, Project Management, Delivery Services, be curious with a keenness to learn and develop own skills and knowledge outside of the working environment.
• Confident in recording and presenting key findings and conclusions to different levels of the business.

Career Path

Senior Security Project Manager, with the skills, behaviours, and determination to succeed can progress to roles such as Security Program Manager, Head of Security Delivery Services, Program / Portfolio Director, or specialise in roles overseeing Security Strategy, Governance and Compliance

AVEVA requires all successful applicants to undergo and pass a comprehensive background check before they start employment. Background checks will be conducted in accordance with local laws and may, subject to those laws, include proof of educational attainment, employment history verification, proof of work authorization, criminal records, identity verification, credit check. Certain positions dealing with sensitive and/or third party personal data may involve additional background check criteria.

AVEVA is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business.

Come and join AVEVA to create the transformative technology that enables our customers to engineer a better world.