Cybersecurity Project Manager

Prometric; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Prometric Kuala Lumpur is seeking a Cybersecurity Project Manager to lead security, risk, governance, and compliance initiatives globally. You will translate security priorities into actionable project plans, coordinate across IT, operations, and audits, and report progress to executives.

The role requires strong PM discipline, knowledge of security controls, and excellent stakeholder communication. Candidates should be comfortable working in a fast-moving, distributed environment.

Qualifications

• Proven experience managing technology, cybersecurity, risk, compliance, or audit projects.
• Strong PM fundamentals: scope, schedule, dependencies, risk, stakeholder comms, status reporting.
• Knowledge of cybersecurity and compliance concepts: IAM, vulnerability management, incident response.
• Familiar with ISO 27001, SOC 2, PCI DSS, NIST or similar control frameworks.
• Translate security topics into business language for non-technical audiences.
• Experience coordinating cross-functional teams, vendors, auditors, and leadership.
• Experience creating project plans, meeting agendas, decision logs, dashboards, and exec updates.
• Proficient with MS Office and PM tools (MS Project, Azure DevOps, Jira, Wrike, Smartsheet).
• Excellent written and verbal communication; clarity, accountability, follow-through.
• Highly organized with multiple priorities and minimal supervision.

Responsibilities

• Plan, coordinate, and manage cybersecurity, risk, compliance and governance projects from initiation to closure.
• Develop and maintain project plans, schedules, milestones, RAID logs, status reports.
• Coordinate work across Information Security, IT, infrastructure, development, operations, audit, legal, privacy, vendors and business teams.
• Support initiatives related to security operations, IAM, vulnerability management, incident readiness, client assurance, audit remediation, compliance readiness.
• Track risks, issues, decisions, actions, dependencies; escalate blockers with options.
• Ensure governance, change control, documentation, and evidence retention standards are met.
• Translate security requirements into practical business milestones, outcomes and reporting.
• Maintain clear stakeholder communication on scope, timelines, risks and impact.

Skills

Project management

Cybersecurity knowledge

Governance & risk management

Stakeholder communication

Cross-functional coordination

Documentation & reporting

Education

Bachelor’s degree in information technology or related field

PM certification (PMP/PRINCE2/Agile)

Tools

Microsoft Project

Azure DevOps

Jira

Wrike

Smartsheet

Job description

Job Title: Cybersecurity Project Manager

Reports To: Chief Information Security Officer

Department: Information Security

Location: Kuala Lumpur

SUMMARY

We are seeking a highly organized, proactive, and business-focused Cybersecurity and Compliance Project Manager to join the Information Security team. This role is responsible for planning, coordinating, and delivering cybersecurity, risk, governance, and compliance initiatives across a global environment. The position will help translate security priorities into clear project plans, measurable outcomes, and executive-ready reporting while ensuring work is delivered on time, within scope, and aligned to enterprise risk and compliance objectives.

The ideal candidate will have strong project management discipline, a working understanding of cybersecurity and compliance programs, and the ability to coordinate across technical, operational, audit, vendor, and business stakeholders. This role requires excellent communication skills, attention to detail, sound judgment, and the ability to drive progress in a fast-moving, globally distributed environment.

DUTIES & RESPONSIBILITIES

Cybersecurity and Compliance Project Delivery

• Plan, coordinate, and manage cybersecurity, risk, compliance, and governance projects from initiation through closure.
• Develop and maintain project plans, schedules, milestones, dependencies, RAID logs, status reports, and executive-ready updates.
• Coordinate work across Information Security, IT, infrastructure, application development, operations, audit, legal, privacy, vendors, and business teams.
• Support delivery of initiatives related to security operations, identity and access management, vulnerability management, incident readiness, client assurance, audit remediation, and compliance readiness.
• Track risks, issues, decisions, action items, and dependencies, escalating blockers with clear options and recommended paths forward.
• Ensure projects follow established governance, change management, documentation, and evidence retention standards.
• Translate security requirements and technical workstreams into practical business milestones, outcomes, and reporting.
• Maintain clear communication with stakeholders on scope, timelines, risks, deliverables, and expected business impact.

Compliance, Risk, and Reporting Support

• Support programs aligned to frameworks and obligations such as ISO 27001, SOC 2, PCI DSS, internal policies, client security requirements, and other regulatory or contractual commitments.
• Coordinate audit and assessment activities, including evidence requests, remediation tracking, management responses, and follow-up actions.
• Create and maintain dashboards, scorecards, and reporting artifacts that demonstrate project progress, risk reduction, compliance readiness, and control improvement.
• Partner with security leaders to prepare concise updates for executive leadership, audit stakeholders, client-facing teams, and operational leadership.
• Drive continuous improvement by identifying recurring project delivery issues, process gaps, and opportunities to standardize security program execution.

QUALIFICATIONS & EXPERIENCE

Essential Qualifications & Skills

• Proven experience managing technology, cybersecurity, risk, compliance, or audit-related projects in a complex organization.
• Strong understanding of project management fundamentals, including scope, schedule, dependencies, risk management, stakeholder communication, and status reporting.
• Working knowledge of cybersecurity and compliance concepts, including access management, vulnerability management, incident response, security controls, audit evidence, and risk remediation.
• Familiarity with security and compliance frameworks such as ISO 27001, SOC 2, PCI DSS, NIST, or similar control frameworks.
• Ability to translate technical security topics into clear business language for non-technical stakeholders.
• Experience coordinating cross-functional work across technical teams, business stakeholders, vendors, auditors, and leadership.
• Experience creating project plans, meeting agendas, decision logs, action trackers, RAID logs, dashboards, and executive-level status updates.
• Strong proficiency with Microsoft Office and project management or workflow tools such as Microsoft Project, Azure DevOps, Jira, Wrike, Smartsheet, or similar platforms.
• Excellent written and verbal communication skills, with the ability to drive clarity, accountability, and follow-through.
• Highly organized, detail-oriented, and able to manage multiple priorities with minimal supervision.

Desired Qualifications & Experience

• Bachelor’s degree in information technology, cybersecurity, business, project management, or a related field, or equivalent professional experience.
• Project management certification or formal training, such as PMP, PRINCE2, Agile, Scrum Master, or equivalent.
• Security, risk, or compliance certification a plus - Security+, CISM, CRISC, CISA, ISO 27001, ITIL, or equivalent.
• Experience working in regulated, audit-driven, client-facing, or globally distributed environments.
• Experience supporting security assessments, client assurance requests, control remediation, incident readiness, or third-party risk activities.