Senior IT Risk Project Manager

Luxoft; Charlotte (NC); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Luxoft is seeking a Senior IT Risk Project Manager to join a MaaS program for a leading US financial institution. You will ensure successful delivery, manage budgets, and lead cross-functional teams across global locations, aligning risk and compliance with program goals.

The role emphasizes IT risk, security, and governance, with responsibilities spanning presales, contracting, planning, and execution. Strong communication with executives is essential.

Qualifications

• 7+ years of professional experience in software development projects and management.
• 5+ years of experience in large scale Project/Program management.
• Proven track record in complex projects with global, distributed teams.
• People management experience for 20+ FTEs.
• Good understanding of program financials and reporting.
• Understanding of SDLC and ability to optimize project processes.
• Experience with IT risk, security, or compliance programmes; ability to translate findings to business impact.

Responsibilities

• Ensure successful delivery of projects and meet client expectations.
• Achieve financial targets and manage project budget.
• Manage stakeholders' expectations and maintain governance.
• Drive presales and business development activities.
• People management and team development responsibilities.
• Oversee project lifecycle: pre-sale, contracting, start, planning, execution, and team management.

Skills

Project management

Large-scale program management

Stakeholder management

Financial management & reporting

SDLC understanding

Risk management

Communication

Team leadership

Executive presentation

PMP/PRINCE2/SAFe

Education

Master's degree in computer science or equivalent

Job description

Project description

Modernization as a Service (MaaS) is a cross-functional practice that supports all business verticals within the company.We are seeking a Senior IT Risk Project Manager to join our project for a leading US financial institution.

Responsibilities

• Ensure successful delivery of projects
• Achieve financial targets
• Manage stakeholders' expectations
• Drive presales & business development activities
• People management activities
• Project manager activities:
  1. Pre-sale
  2. Contracting
  3. Project start
  4. Project Planning and Execution
  5. Team Management
  6. Self-management

SKILLS

Must have

• Core project management:- 7+ years of professional experience in software development projects and management
• 5+ years of experience in large scale Project/Program management
• Proven track record in complex projects with global, distributed teams
• People management experience for 20+ FTEs
• Good understanding of program financials and reporting
• Good understanding of project manager areas of responsibility:Project PlanningBacklog prioritization, detailing and decompositionUnderstanding of SDLC and ability to build/optimize project processesCommunication with the team, clientUnderstanding of motivation factorsTeam ManagementResult-orientedWorking with feedback: provide and receiveRisk management:- Demonstrable experience running IT risk, security, or compliance-driven programmes - not only feature delivery- Ability to build and maintain a risk register: identification, qualification, scoring, mitigation planning, ownership assignment, and escalation- Experience coordinating remediation programmes across multiple engineering teams (patching, vulnerability closure, control implementation) and tracking them to measurable closure- Comfortable operating with audit, InfoSec, and compliance stakeholders; experience preparing evidence and status for governance forums or steering committees- Working knowledge of at least one control or risk framework (NIST CSF/RMF, ISO 27001, CIS Controls, SOC 2, or similar)- Ability to translate technical findings into business impact and risk-based prioritization for senior stakeholdersSoft skills and education:- Verbal and written business communication skills- Presentation skills, including to executive and risk-committee audiences- Negotiation skills- Master's Degree in computer science or similar education- Certification advantage: PMP / PRINCE2 / SAFe, plus one of CISSP, CISM, CRISC, or CISA

Nice to have

• Familiarity with security vulnerability management: CVE/CVSS, severity triage, SLA-based remediation cycles
• Exposure to penetration testing engagements - scoping, vendor coordination, findings review, retest tracking
• Understanding of AI/GenAI risk: model and data governance, AI risk scans and assessments, prompt injection and data leakage exposure, third-party AI tooling review
• Awareness of emerging AI governance and regulation (EU AI Act, NIST AI RMF) and how it lands on delivery teams
• Understanding of secure SDLC practices: SAST/DAST/SCA, dependency and supply chain risk, threat modelling