Senior PM Cibersecurity

Amaris Consulting | Part of Mantu; Madrid; Hybrid; EUR 65,000 - 95,000; Full time

Job summary

Amaris Consulting, part of Mantu, is seeking a Senior Cybersecurity Project Manager – GRC & Digital Platforms to manage cybersecurity risks across Salesforce, CRM, and e‑commerce projects for an international group. The role is based in Madrid in a hybrid environment, offering growth within a global organization that values ownership and collaboration.

You will lead risk assessments, coordinate mitigation plans with technical and business teams, and support security governance activities across

Qualifications

• 5–8 years of experience leading cybersecurity projects.
• Experience in GRC, cybersecurity risk management or security governance.
• Proven ability to identify, assess and track project risks.
• Ability to coordinate mitigation plans with IT, security and business teams.
• Knowledge of CRM, e-commerce or other business-critical apps.
• Strong communication, organization and stakeholder management skills.

Responsibilities

• Integrate cybersecurity requirements into project plans with PMs and product owners.
• Lead risk assessments for Salesforce/CRM/e-commerce projects (design, implementation, run).
• Define and monitor risk treatment plans with owners and deadlines.
• Coordinate with security architects, engineers and stakeholders to implement controls.
• Track and report security incidents, non-compliances and actions for your perimeter.
• Prepare risk dashboards and KPIs for steering committees.
• Contribute to security governance policies and procedures.
• Raise awareness of cybersecurity risks among project teams.

Skills

Cybersecurity PM

GRC experience

Security governance

CRM/E-commerce know-how

Stakeholder management

Salesforce experience

English proficiency

Proactive mindset

Job description

Mission description

• Manage cybersecurity risks across projects involving Salesforce, CRM and e‑commerce platforms.
• Identify and assess implementation and operational risks throughout the project lifecycle.
• Coordinate mitigation actions with technical, security and business stakeholders.
• Monitor security controls, incidents and action plans, ensuring proper follow‑up and escalation when needed.
• Contribute to GRC activities: risk registers, control frameworks, policies, and compliance follow‑up.
• Support security governance: preparation of committees, reporting, and decision‑making support for management.

Job Description

Join Amaris Consulting and manage cybersecurity risks across strategic digital projects (Salesforce, CRM, e‑commerce) for a leading international group in its sector. Be part of an international cybersecurity & GRC team, grow in a hybrid environment in Madrid, and develop your career within a global organization that values ownership, collaboration, and technical excellence.

Your mission & impact

As a Senior Cybersecurity Project Manager – GRC & Digital Platforms (Salesforce / CRM / e‑commerce), you will ensure that cybersecurity risks are identified, assessed, mitigated and monitored across key projects and platforms in an international environment. You will work closely with technical, security and business teams to coordinate mitigation plans, follow up on action plans and support security governance activities.

Mission description

• Manage cybersecurity risks across projects involving Salesforce, CRM and e‑commerce platforms.
• Identify and assess implementation and operational risks throughout the project lifecycle.
• Coordinate mitigation actions with technical, security and business stakeholders.
• Monitor security controls, incidents and action plans, ensuring proper follow‑up and escalation when needed.
• Contribute to GRC activities: risk registers, control frameworks, policies, and compliance follow‑up.
• Support security governance: preparation of committees, reporting, and decision‑making support for management.

What we’re looking for

• 5–8 years of experience managing cybersecurity projects.
• Experience in GRC, cybersecurity risk management or security governance.
• Proven experience identifying, assessing and tracking project and implementation risks.
• Ability to coordinate mitigation plans with IT, security and business teams.
• Knowledge of CRM, e‑commerce or other business‑critical applications.
• Strong communication, organization and stakeholder management skills.
• Salesforce experience is a strong plus.
• High level of English for daily collaboration with international teams.
• A proactive, structured and autonomous mindset, able to drive risk remediation and follow‑up without constant supervision.

What you will do (day‑to‑day)

• Work with project managers and product owners to integrate cybersecurity requirements into project plans.
• Lead risk assessments for Salesforce, CRM and e‑commerce projects (design, implementation, run).
• Define and follow risk treatment plans: mitigation measures, responsible owners, deadlines and status.
• Coordinate with security architects, engineers and business stakeholders to ensure controls are implemented.
• Track and report on security incidents, non‑compliances and action plans related to your perimeter.
• Prepare and present risk dashboards and KPIs to steering committees and management.
• Contribute to policies, standards and procedures related to project security and application security governance.
• Support awareness and communication on cybersecurity risks to project and business teams.

Your mindset & soft skills

• Strong analytical and problem‑solving skills, applied to cybersecurity risks and prioritization.
• Excellent stakeholder management: able to influence without direct authority and align diverse teams.
• Confident in leading meetings, challenging decisions when needed, and defending security priorities.
• Comfortable working in international and multicultural environments, adapting your communication to different audiences (technical, business, management).
• Proactive, structured and autonomous, with a strong sense of ownership and accountability.

Nice to have

• Hands‑on experience with Salesforce security or other major CRM / e‑commerce platforms.
• Experience with risk management frameworks or security standards (ISO 27001, NIST, etc.).
• Security or GRC certifications (e.g. CISM, CISSP, ISO 27005, ISO 27001 Lead Implementer/Auditor) are a plus.
• Experience in multinational or multi‑country environments.

Why join us?

• Join a fast‑growing global consulting group with strong cybersecurity and GRC practices.
• Work in a hybrid model in Madrid within an international environment (projects and teams across Europe and beyond).
• Develop your skills in cybersecurity risk management, GRC, Salesforce/CRM/e‑commerce security and security governance.
• Grow your career within Amaris Consulting and the Mantu Group, with access to international opportunities and continuous learning.

At Amaris Consulting, we are committed to creating an inclusive environment. We welcome all qualified applications regardless of gender, sexual orientation, race, ethnicity, age, or any other characteristic.

Who are we?

Amaris Consulting, part of Mantu, is an independent technology consulting firm providing guidance and solutions to businesses. With more than 1,000 clients across the globe, we have been rolling out solutions in major projects for over a decade – this is made possible by an international team of 7,600 people spread across 5 continents and more than 60 countries. Our solutions focus on four different Business Lines: Information System & Digital, Telecom, Life Sciences and Engineering. We’re focused on building and nurturing a top talent community where all our team members can achieve their full potential. Amaris is your steppingstone to cross rivers of change, meet challenges and achieve all your projects with success.

At Amaris, we strive to provide our candidates with the best possible recruitment experience. We like to get to know our candidates, challenge them, and be able to give them proper feedback as quickly as possible. Here's what our recruitment process looks like:

Brief Call: Our process typically begins with a brief virtual/phone conversation to get to know you! The objective? Learn about you, understand your motivations, and make sure we have the right job for you!

Interviews: (the average number of interviews is 3 - the number may vary depending on the level of seniority required for the position). During the interviews, you will meet people from our team: your line manager of course, but also other people related to your future role. We will talk in depth about you, your experience, and skills, but also about the position and what will be expected of you. Of course, you will also get to know Amaris: our culture, our roots, our teams, and your career opportunities!

Case study: Depending on the position, we may ask you to take a test. This could be a role play, a technical assessment, a problem‑solving scenario, etc.

As you know, every person is different and so is every role in a company. That is why we have to adapt accordingly, and the process may differ slightly at times. However, please know that we always put ourselves in the candidate's shoes to ensure they have the best possible experience.

We look forward to meeting you!