Senior IT Risk Project Manager

Luxoft; Columbus (OH); On-site; USD 140,000 - 170,000; Full time

Job summary

Luxoft is seeking a Senior IT Risk Project Manager to join a strategic MaaS program for a leading US financial institution. The role focuses on delivering complex projects with global, distributed teams while ensuring financial targets are met and stakeholder expectations are managed.

The position requires deep knowledge of IT risk, security, or compliance programs, and the ability to translate technical findings into business risk prioritization for executives.

Qualifications

• 7+ years of experience in software development projects and management.
• 5+ years in large scale project/program management.
• Proven track record in complex projects with global, distributed teams.
• People management experience for 20+ FTEs.
• Good understanding of program financials and reporting.
• Knowledge of risk frameworks (NIST CSF/RMF, ISO 27001, CIS, SOC 2).
• Master's degree in CS or related education; PMP/PRINCE2/SAFe plus CISSP/CISM/CRISC/CISA beneficial.

Responsibilities

• Ensure successful delivery of projects.
• Achieve financial targets and manage budgets.
• Manage stakeholders' expectations.
• Drive presales and business development activities.
• Lead people management.
• Oversee project lifecycle: pre-sale, contracting, start, planning, execution, and team management.

Skills

Project management

Program management

Global teams

People management

Program finances

PM responsibilities

Certifications

Education

Master's degree in CS or similar

Job description

Project description

Modernization as a Service (MaaS) is a cross-functional practice that supports all business verticals within the company.We are seeking a Senior IT Risk Project Manager to join our project for a leading US financial institution.

Responsibilities

• Ensure successful delivery of projects
• Achieve financial targets
• Manage stakeholders' expectations
• Drive presales & business development activities
• People management activities
• Project manager activities:
  1. Pre-sale
  2. Contracting
  3. Project start
  4. Project Planning and Execution
  5. Team Management
  6. Self-management

SKILLS

Must have

• Core project management:- 7+ years of professional experience in software development projects and management
• 5+ years of experience in large scale Project/Program management
• Proven track record in complex projects with global, distributed teams
• People management experience for 20+ FTEs
• Good understanding of program financials and reporting
• Good understanding of project manager areas of responsibility:Project PlanningBacklog prioritization, detailing and decompositionUnderstanding of SDLC and ability to build/optimize project processesCommunication with the team, clientUnderstanding of motivation factorsTeam ManagementResult-orientedWorking with feedback: provide and receiveRisk management:- Demonstrable experience running IT risk, security, or compliance-driven programmes - not only feature delivery- Ability to build and maintain a risk register: identification, qualification, scoring, mitigation planning, ownership assignment, and escalation- Experience coordinating remediation programmes across multiple engineering teams (patching, vulnerability closure, control implementation) and tracking them to measurable closure- Comfortable operating with audit, InfoSec, and compliance stakeholders; experience preparing evidence and status for governance forums or steering committees- Working knowledge of at least one control or risk framework (NIST CSF/RMF, ISO 27001, CIS Controls, SOC 2, or similar)- Ability to translate technical findings into business impact and risk-based prioritization for senior stakeholdersSoft skills and education:- Verbal and written business communication skills- Presentation skills, including to executive and risk-committee audiences- Negotiation skills- Master's Degree in computer science or similar education- Certification advantage: PMP / PRINCE2 / SAFe, plus one of CISSP, CISM, CRISC, or CISA

Nice to have

• Familiarity with security vulnerability management: CVE/CVSS, severity triage, SLA-based remediation cycles
• Exposure to penetration testing engagements - scoping, vendor coordination, findings review, retest tracking
• Understanding of AI/GenAI risk: model and data governance, AI risk scans and assessments, prompt injection and data leakage exposure, third-party AI tooling review
• Awareness of emerging AI governance and regulation (EU AI Act, NIST AI RMF) and how it lands on delivery teams
• Understanding of secure SDLC practices: SAST/DAST/SCA, dependency and supply chain risk, threat modelling