Cyber Security Specialist (DevSecOps Project Manager)

In this role, you will lead DevSecOps capability delivery for Enterprise Cybersecurity Engineering. This role combines project management with Secure Software Development Life Cycle (Secure SDLC) expertise to manage complex security initiatives, align cross-functional teams, and deliver business-aligned security outcomes on schedule and within budget.

Key Responsibilities

• Secure SDLC Delivery: Drive end-to-end integration of security principles and automated gates across all software development stages.
• Project Governance: Define project scope, tasks, timelines, and budgets while actively managing cross-workstream risks, dependencies, and change requests.
• Cross-Functional Alignment: Partner with engineering, architecture, operations, and procurement teams to align workflows and deliverables.
• Executive Reporting: Maintain project dashboards, status reports, and executive summaries to ensure complete transparency for leadership.

Requirements:

• Technical Background: Qualification in Information Technology, Computer Science, or equivalent practical experience.
• Project Management: Track record in technical project management delivering security or DevSecOps initiatives, ideally in financial services or asset management.
• CI/CD & Security Tooling: Practical experience with Secure SDLC practices, CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins), containers/orchestration (Docker, Kubernetes), IaC (Terraform, CloudFormation), and Policy-as-Code (OPA).
• Application & Cloud Security: Solid grounding in OWASP Top 10, cryptography basics, supply-chain security (SBOM, SLSA), and operational cloud security (Microsoft Sentinel, AWS Security Hub, GuardDuty, CloudTrail, CSPM).
• Risk & Threat Assessment: Hands-on knowledge of threat modeling, secure design reviews, risk assessments, and vulnerability management.
• Certifications: PMP, Cloud Architect/Security, or DevSecOps certifications are advantageous.

Skills

Certifications, Terraform, Leadership, OWASP, Jenkins, Kubernetes, Software Security, Technical Project Management, Web Application Security Assessment, Cloudformation, Application Security Architecture, Docker, GitLab, DevSecOps, Threat Modeling