Project Manager + Cybersecurity

Sonata Software; Dadri; On-site; INR 3,000,000 - 5,400,000; Full time

Job summary

Sonata Software in India is seeking an experienced Senior Project Manager focused on cybersecurity governance, risk and compliance to lead cross-functional initiatives across development, DevOps, QA, security and audit teams.

You will drive SDLC integrations, CI/CD quality gates, remediation tracking, KPI dashboards, and risk-based delivery while ensuring regulatory compliance with PCI-DSS, SOC 2, ISO 27001 and NIST CSF.

Qualifications

• 10+ years of experience in technical project/program management in an enterprise environment.
• Strong background in cybersecurity governance, risk and compliance.

Responsibilities

• Coordinate scope, schedule, budget, and risks across cross-functional teams (Development, DevOps, QA, Security, Audit, Operations).
• Run technical working groups and facilitate collaboration between technical and non-technical stakeholders.
• Integrate control objectives into the SDLC and CI/CD release pipelines.
• Drive design changes, code fixes, configuration updates, automated tests, and regression testing to validate controls.
• Drive continuous improvement in software quality practices including test automation and release governance.
• Establish and report KPIs and dashboards tracking remediation SLAs, defect escape rates, and control effectiveness.
• Communicate status, blockers, and impact to GRC stakeholders and leadership.
• Ensure compliance with regulatory obligations (PCI-DSS, SOC 2, ISO 27001, NIST CSF).
• Lead end-to-end cybersecurity remediation initiatives including vulnerabilities and misconfigurations.

Skills

Cyber Risk Management

Corporate Audit

Technology Services

QA

Development

Architecture

Tools

JIRA

ServiceNow

Archer

Tenable

Qualys

Rapid7

Confluence

SharePoint

MS Teams

Job description

Primary Skills:

• PM with Cyber Risk Management, Corporate Audit, Technology Services, QA, Development, Architecture

Experience :

• 10+ years

Key Responsibilities:

Cross-Functional Coordination:

• Serve as the central point of accountability for project scope, schedule, budget, and risks


• Coordinate cross-functional teams (Development, DevOps, QA, Security, Audit, Operations)


• Run technical working groups and facilitate collaboration between technical and non-technical stakeholders


• Escalate blockers appropriately and remove impediments to project delivery

SDLC & Quality Integration:

• Integrate control objectives into the Software Development Life Cycle (SDLC) and CI/CD release pipelines


• Drive design changes, code fixes, configuration updates, automated tests, and regression testing to validate controls


• Drive continuous improvement in software quality practices including test automation, static/dynamic analysis, CI/CD quality gates, code review standards, and release governance

Governance & Reporting:

• Establish and report key performance indicators (KPIs) and dashboards tracking remediation SLAs, defect escape rates, control effectiveness, and test coverage


• Communicate status, blockers, and impact clearly to leadership and Governance/Risk/Compliance (GRC) stakeholders


• Ensure alignment with relevant GRC requirements and maintain up-to-date control mappings


• Prepare executive-level risk dashboards and metrics providing transparency into security posture

Risk & Compliance Management:

• Work with GRC teams to assess and document security risks across products, applications, and systems


• Collaborate with remediation owners to develop and track resolution plans based on risk severity and business impact


• Ensure compliance with regulatory and industry obligations (PCI-DSS, SOC 2, ISO 27001, NIST CSF)


• Lead end-to-end technical project management for cybersecurity remediation initiatives including vulnerabilities, misconfigurations, and control gaps


• Ensure timely, risk-prioritized delivery of remediation projects


• Translate cyber requirements and control objectives into actionable workstreams, acceptance criteria, test plans, and measurable remediation steps


• Coordinate response and resolution of security incidents within defined SLAs

MANDATORY SKILLS:

• 5+ years of technical project/program management experience in an enterprise environment

SDLC & DevOps:

• Practical experience with Software Development Life Cycle (SDLC)


• Experience with DevOps/CI/CD pipelines and automated testing practices


• Understanding of software quality engineering principles

Project Management:

• Proven ability to define scope, prioritize work, remove blockers, manage timelines, and report progress with concise metrics


• Strong stakeholder management and cross-functional leadership skills


• Experience running technical working groups and Agile ceremonies

Tools & Platforms:

• Proficiency with ticketing and orchestration tools (JIRA, ServiceNow)


• Experience with GRC or vulnerability management platforms (Archer, Tenable, Qualys, Rapid7)


• Familiarity with collaboration tools (Confluence, SharePoint, MS Teams)

Cybersecurity Expertise:

• Hands-on understanding of security vulnerabilities, remediation processes, and common mitigation patterns (patching, configuration changes, secure coding fixes)


• Experience with vulnerability management platforms and GRC tools


• Knowledge of security frameworks (NIST CSF, ISO/IEC 27001, CIS Controls)