Program Manager

Purview Services; Mumbai; On-site; INR 3,500,000 - 5,500,000; Full time

Job summary

Purview Services provides recruitment and security-focused services and is seeking a Programme Manager to lead cyber/security programmes end-to-end. You will translate security strategy into deliverable roadmaps, coordinating engineering, architecture, operations and risk stakeholders to deliver secure-by-design capabilities at pace with governance and measurable risk reduction.

The role requires 8-12 years of experience in programme management, strong SDLC and Agile/DevOps exposure, and the

Qualifications

• Proven programme management experience delivering cyber/security or technology risk programmes.
• Strong software engineering/SDLC background with delivery in engineering-heavy environments.
• Experience delivering across Agile/DevOps at scale (multiple squads/streams).
• Track record managing complex dependencies, legacy constraints and remediation programmes.
• Experience working with security teams on controls, assurance and audit evidence.

Responsibilities

• Lead one or more cyber/security programmes end-to-end with governance and risk reduction.
• Own scope, plan, budget, RAID, dependencies; coordinate across product, engineering, security and operations.
• Drive delivery governance, reporting, and milestone tracking; manage third parties when applicable.
• Translate cyber risk requirements into epics/features for engineering teams; ensure security controls alignment.
• Collaborate with SRE/DevOps and architects to adopt secure engineering practices and manage debt.
• Engage senior stakeholders and communicate complex topics clearly; foster a one-team culture.

Skills

Delivery discipline

Communication

Stakeholder management

Leadership

Risk management

Agile/DevOps

Education

MSP certification

PRINCE2 certification

PMP certification

SAFe/PSM

Security certifications CISSP/CISM/CCSP

Tools

CI/CD pipelines

SAST/DAST tooling

IAM/PAM tooling

Logging/SIEM platforms

Vulnerability scanning tools

Job description

Role: Programme Manager

Exp: 8-12 Years

Location: Hyderabad/ Pune

Job Description:

Role purpose

Lead one or more cyber/security programmes end-to-end, translating security strategy and risk outcomes into deliverable roadmaps. You'll coordinate engineering, architecture, operations and risk stakeholders to deliver secure by-design capabilities at pace, with clear governance and measurable risk reduction.

Key responsibilities

Programme leadership and delivery

• Own programme scope, outcomes, plan, budget, RAID, dependencies and delivery cadence.
• Build and run integrated delivery plans across multiple workstreams (product, engineering, security, operations).

• Drive delivery governance: steering forums, status reporting, milestone tracking and decision logs.
• Manage third parties/vendors where applicable (contracts, deliverables, performance).

Cyber and risk outcomes

• Translate cyber risk requirements into actionable epics/features for engineering teams.
• Ensure alignment to security controls (e.g., IAM, logging/monitoring, vulnerability management, encryption, secure SDLC).

Engineering partnership (core differentiator)

• Work closely with software engineers, SRE/DevOps and architects to shape feasible delivery approaches.
• Drive adoption of secure engineering practices: threat modelling, SAST/DAST, dependency scanning, secrets management, CI/CD hardening.
• Manage technical debt and remediation backlogs (e.g., CVEs, end-of-life technology, misconfigurations) with prioritisation based on risk and impact.
• Coordinate release planning and change management to minimise service disruption.

Stakeholder management

• Engage senior stakeholders across Technology, CISO/Security, Risk/Compliance and business owners.
• Communicate complex technical topics in plain language, with clear options and trade-offs.
• Build a “one team” culture across functions and geographies.

Financials and commercial

• Own programme financials: forecasting, benefits tracking, resource planning and cost control.
• Support business cases and investment proposals tied to risk reduction and resilience outcomes.

Required experience

• Proven programme management experience delivering cyber/security or technology risk programmes.
• Strong software engineering/SDLC background (hands-on development, engineering lead, or delivery in engineering-heavy environments).
• Experience delivering across Agile/DevOps at scale (multiple squads/streams).
• Track record managing complex dependencies, legacy constraints and remediation programmes.
• Experience working with security teams on controls, assurance and audit evidence.

Technical knowledge (expected)

• Secure SDLC concepts and common tooling (CI/CD, code scanning, artefact repositories).
• Cloud and platform fundamentals (e.g., AWS/Azure/GCP concepts), containers, APIs, microservices.
• Identity and access management basics (SSO, MFA, PAM), secrets management.
• Vulnerability management lifecycle (discovery triage remediation verification).
• Logging/monitoring and incident response concepts.
• Familiarity with common frameworks/standards (e.g., NIST CSF, ISO 27001, OWASP Top 10).

Skills and behaviours

• Strong delivery discipline: planning, governance and execution under pressure.
• Excellent written and verbal communication; confident presenting to senior forums.
• Pragmatic, outcome-focused, able to balance risk, cost and delivery timelines.
• Collaborative leadership across diverse teams and cultures.

Qualifications (nice to have)

• Programme/project certifications: MSP, PRINCE2, PMP, Agile (SAFe/PSM).
• Security certifications: CISSP, CISM, CCSP (or equivalent experience).

Example deliverables you might own

• Enterprise vulnerability remediation programme (CVE SLAs, end-of-life technology removal).
• CI/CD and secure engineering uplift (SAST/DAST, SBOM, signing, pipeline controls).
• IAM/PAM rollout and privileged access reduction.
• Cloud security baseline implementation and control assurance.
• Centralised logging/SIEM onboarding programme and detection coverage uplift.