Cybersecurity Project Manager

Prometric; Kuala Lumpur; On-site; MYR 120,000 - 210,000; Full time

Job summary

Prometric in Kuala Lumpur is seeking a Cybersecurity Project Manager to lead security, risk, governance, and compliance initiatives across a global environment. You will translate security priorities into clear project plans and executive-ready reporting.

The role requires strong PM discipline, ability to coordinate across IT, security, audit, vendors, and business teams, and excellent communication. You will ensure delivery on time, within scope, and aligned to enterprise risk and regulatory

Qualifications

• Proven experience leading cybersecurity, risk, compliance or audit projects in a large org.
• Strong PM fundamentals: scope, schedule, dependencies, risk, status reporting.
• Knowledge of cybersecurity concepts: access management, vulnerability mgmt, risk remediation.
• Familiarity with ISO 27001, SOC 2, PCI DSS, NIST or similar frameworks.

Responsibilities

• Plan, coordinate, and manage cybersecurity, risk, compliance, and governance projects from initiation through closure.
• Develop and maintain project plans, schedules, milestones, RAID logs, status reports, and executive updates.
• Coordinate work across Information Security, IT, infrastructure, development, operations, audit, legal, privacy, vendors, and business teams.
• Support delivery of security operations, identity and access management, vulnerability management, incident readiness, client assurance, audit remediation, and compliance readiness.
• Track risks, issues, decisions, actions, dependencies; escalate blockers with options and paths forward.
• Ensure projects follow governance, change management, documentation, and evidence retention standards.
• Translate security requirements into practical business milestones, outcomes, and reporting.
• Maintain clear communication with stakeholders on scope, timelines, risks, and business impact.

Skills

Project management

Cybersecurity concepts

Stakeholder communication

Risk management

Governance & compliance

Cross-functional coordination

Report writing

Attention to detail

Education

Bachelor's degree in IT/cybersecurity

Tools

Microsoft Project

Azure DevOps

Jira

Wrike

Smartsheet

Job description

Job Title: Cybersecurity Project Manager

Reports To: Chief Information Security Officer

Department: Information Security

SUMMARY

We are seeking a highly organized, proactive, and business-focused Cybersecurity and Compliance Project Manager to join the Information Security team. This role is responsible for planning, coordinating, and delivering cybersecurity, risk, governance, and compliance initiatives across a global environment. The position will help translate security priorities into clear project plans, measurable outcomes, and executive-ready reporting while ensuring work is delivered on time, within scope, and aligned to enterprise risk and compliance objectives.

The ideal candidate will have strong project management discipline, a working understanding of cybersecurity and compliance programs, and the ability to coordinate across technical, operational, audit, vendor, and business stakeholders. This role requires excellent communication skills, attention to detail, sound judgment, and the ability to drive progress in a fast-moving, globally distributed environment.

DUTIES & RESPONSIBILITIES

Cybersecurity and Compliance Project Delivery:

• Plan, coordinate, and manage cybersecurity, risk, compliance, and governance projects from initiation through closure.
• Develop and maintain project plans, schedules, milestones, dependencies, RAID logs, status reports, and executive-ready updates.
• Coordinate work across Information Security, IT, infrastructure, application development, operations, audit, legal, privacy, vendors, and business teams.
• Support delivery of initiatives related to security operations, identity and access management, vulnerability management, incident readiness, client assurance, audit remediation, and compliance readiness.
• Track risks, issues, decisions, action items, and dependencies, escalating blockers with clear options and recommended paths forward.
• Ensure projects follow established governance, change management, documentation, and evidence retention standards.
• Translate security requirements and technical workstreams into practical business milestones, outcomes, and reporting.
• Maintain clear communication with stakeholders on scope, timelines, risks, deliverables, and expected business impact.

Compliance, Risk, and Reporting Support:

• Support programs aligned to frameworks and obligations such as ISO 27001, SOC 2, PCI DSS, internal policies, client security requirements, and other regulatory or contractual commitments.
• Coordinate audit and assessment activities, including evidence requests, remediation tracking, management responses, and follow-up actions.
• Create and maintain dashboards, scorecards, and reporting artifacts that demonstrate project progress, risk reduction, compliance readiness, and control improvement.
• Partner with security leaders to prepare concise updates for executive leadership, audit stakeholders, client-facing teams, and operational leadership.
• Drive continuous improvement by identifying recurring project delivery issues, process gaps, and opportunities to standardize security program execution.

QUALIFICATIONS & EXPERIENCE

Essential Qualifications & Skills

• Proven experience managing technology, cybersecurity, risk, compliance, or audit-related projects in a complex organization.
• Strong understanding of project management fundamentals, including scope, schedule, dependencies, risk management, stakeholder communication, and status reporting.
• Working knowledge of cybersecurity and compliance concepts, including access management, vulnerability management, incident response, security controls, audit evidence, and risk remediation.
• Familiarity with security and compliance frameworks such as ISO 27001, SOC 2, PCI DSS, NIST, or similar control frameworks.
• Ability to translate technical security topics into clear business language for non-technical stakeholders.
• Experience coordinating cross-functional work across technical teams, business stakeholders, vendors, auditors, and leadership.
• Experience creating project plans, meeting agendas, decision logs, action trackers, RAID logs, dashboards, and executive-level status updates.
• Strong proficiency with Microsoft Office and project management or workflow tools such as Microsoft Project, Azure DevOps, Jira, Wrike, Smartsheet, or similar platforms.
• Excellent written and verbal communication skills, with the ability to drive clarity, accountability, and follow-through.
• Highly organized, detail-oriented, and able to manage multiple priorities with minimal supervision.

Desired Qualifications & Experience

• Bachelor’s degree in information technology, cybersecurity, business, project management, or a related field, or equivalent professional experience.
• Project management certification or formal training, such as PMP, PRINCE2, Agile, Scrum Master, or equivalent.
• Security, risk, or compliance certification a plus - Security+, CISM, CRISC, CISA, ISO 27001, ITIL, or equivalent.
• Experience working in regulated, audit-driven, client-facing, or globally distributed environments.
• Experience supporting security assessments, client assurance requests, control remediation, incident readiness, or third-party risk activities.