Senior IT Risk Project Manager

Luxoft; Minneapolis, Northern (MN, KY); On-site; USD 120,000 - 160,000; Full time

Job summary

Luxoft is seeking a Senior IT Risk Project Manager to join our MaaS program for a leading US financial institution in Minneapolis. You will lead IT risk, security and compliance-driven programs, coordinate remediation, and partner with engineering teams to translate technical findings into business risk priorities.

You will manage project delivery, stakeholders, and presales activities, while guiding governance through risk registers and audit-ready status updates.

Qualifications

• 7+ years of professional experience in software development projects and management.

Responsibilities

• Ensure successful delivery of projects.

Skills

PMO practices

IT risk & security

Stakeholder management

Presales & business development

Leadership

Risk frameworks (NIST/ISO SOC2)

Communication & negotiation

Education

Master's degree in computer science or similar

Job description

Project description

Modernization as a Service (MaaS) is a cross-functional practice that supports all business verticals within the company.We are seeking a Senior IT Risk Project Manager to join our project for a leading US financial institution.

Responsibilities

• Ensure successful delivery of projects
• Achieve financial targets
• Manage stakeholders' expectations
• Drive presales & business development activities
• People management activities
• Project manager activities:
  1. Pre-sale
  2. Contracting
  3. Project start
  4. Project Planning and Execution
  5. Team Management
  6. Self-management

SKILLS

Must have

• Core project management:- 7+ years of professional experience in software development projects and management
• 5+ years of experience in large scale Project/Program management
• Proven track record in complex projects with global, distributed teams
• People management experience for 20+ FTEs
• Good understanding of program financials and reporting
• Good understanding of project manager areas of responsibility:Project PlanningBacklog prioritization, detailing and decompositionUnderstanding of SDLC and ability to build/optimize project processesCommunication with the team, clientUnderstanding of motivation factorsTeam ManagementResult-orientedWorking with feedback: provide and receiveRisk management:- Demonstrable experience running IT risk, security, or compliance-driven programmes - not only feature delivery- Ability to build and maintain a risk register: identification, qualification, scoring, mitigation planning, ownership assignment, and escalation- Experience coordinating remediation programmes across multiple engineering teams (patching, vulnerability closure, control implementation) and tracking them to measurable closure- Comfortable operating with audit, InfoSec, and compliance stakeholders; experience preparing evidence and status for governance forums or steering committees- Working knowledge of at least one control or risk framework (NIST CSF/RMF, ISO 27001, CIS Controls, SOC 2, or similar)- Ability to translate technical findings into business impact and risk-based prioritization for senior stakeholdersSoft skills and education:- Verbal and written business communication skills- Presentation skills, including to executive and risk-committee audiences- Negotiation skills- Master's Degree in computer science or similar education- Certification advantage: PMP / PRINCE2 / SAFe, plus one of CISSP, CISM, CRISC, or CISA

Nice to have

• Familiarity with security vulnerability management: CVE/CVSS, severity triage, SLA-based remediation cycles
• Exposure to penetration testing engagements - scoping, vendor coordination, findings review, retest tracking
• Understanding of AI/GenAI risk: model and data governance, AI risk scans and assessments, prompt injection and data leakage exposure, third-party AI tooling review
• Awareness of emerging AI governance and regulation (EU AI Act, NIST AI RMF) and how it lands on delivery teams
• Understanding of secure SDLC practices: SAST/DAST/SCA, dependency and supply chain risk, threat modelling