Senior IT Risk Project Manager

Luxoft; Phoenix (AZ); On-site; USD 140,000 - 190,000; Full time

Job summary

Luxoft is seeking a Senior IT Risk Project Manager for a major US financial institution in Phoenix, AZ. You will lead cross-functional teams to deliver complex software projects while maintaining risk, security, and compliance controls.

The role emphasizes presales involvement, stakeholder management, and governance through risk frameworks such as NIST CSF/RMF and ISO 27001. A Master’s degree and professional certifications are highly valued.

Qualifications

• 7+ years of professional experience in software development projects and management.
• 5+ years of experience in large scale Project/Program management.
• Experience in complex projects with global, distributed teams.
• People management experience for 20+ FTEs.
• Understanding of program financials and reporting.
• Ability to translate findings into business impact and risk-based prioritization.

Responsibilities

• Ensure successful delivery of projects.
• Achieve financial targets.
• Manage stakeholders' expectations.
• Drive presales & business development activities.
• People management activities.
• Project management activities: Pre-sale, Contracting, Project start, Planning & Execution, Team Management, Self-management.

Skills

Senior project management

Cross-functional leadership

Stakeholder management

Risk management

IT risk & security

Program financials

Team leadership

Communication

Presales & business development

Negotiation

Self-management

Education

Master's Degree in computer science or related field

PMP / PRINCE2 / SAFe certification

CISSP / CISM / CRISC / CISA certification

Tools

NIST CSF/RMF

ISO 27001

Job description

Project description

Modernization as a Service (MaaS) is a cross-functional practice that supports all business verticals within the company.We are seeking a Senior IT Risk Project Manager to join our project for a leading US financial institution.

Responsibilities

• Ensure successful delivery of projects
• Achieve financial targets
• Manage stakeholders' expectations
• Drive presales & business development activities
• People management activities
• Project manager activities:
  1. Pre-sale
  2. Contracting
  3. Project start
  4. Project Planning and Execution
  5. Team Management
  6. Self-management

SKILLS

Must have

• Core project management:- 7+ years of professional experience in software development projects and management
• 5+ years of experience in large scale Project/Program management
• Proven track record in complex projects with global, distributed teams
• People management experience for 20+ FTEs
• Good understanding of program financials and reporting
• Good understanding of project manager areas of responsibility:Project PlanningBacklog prioritization, detailing and decompositionUnderstanding of SDLC and ability to build/optimize project processesCommunication with the team, clientUnderstanding of motivation factorsTeam ManagementResult-orientedWorking with feedback: provide and receiveRisk management:- Demonstrable experience running IT risk, security, or compliance-driven programmes - not only feature delivery- Ability to build and maintain a risk register: identification, qualification, scoring, mitigation planning, ownership assignment, and escalation- Experience coordinating remediation programmes across multiple engineering teams (patching, vulnerability closure, control implementation) and tracking them to measurable closure- Comfortable operating with audit, InfoSec, and compliance stakeholders; experience preparing evidence and status for governance forums or steering committees- Working knowledge of at least one control or risk framework (NIST CSF/RMF, ISO 27001, CIS Controls, SOC 2, or similar)- Ability to translate technical findings into business impact and risk-based prioritization for senior stakeholdersSoft skills and education:- Verbal and written business communication skills- Presentation skills, including to executive and risk-committee audiences- Negotiation skills- Master's Degree in computer science or similar education- Certification advantage: PMP / PRINCE2 / SAFe, plus one of CISSP, CISM, CRISC, or CISA

Nice to have

• Familiarity with security vulnerability management: CVE/CVSS, severity triage, SLA-based remediation cycles
• Exposure to penetration testing engagements - scoping, vendor coordination, findings review, retest tracking
• Understanding of AI/GenAI risk: model and data governance, AI risk scans and assessments, prompt injection and data leakage exposure, third-party AI tooling review
• Awareness of emerging AI governance and regulation (EU AI Act, NIST AI RMF) and how it lands on delivery teams
• Understanding of secure SDLC practices: SAST/DAST/SCA, dependency and supply chain risk, threat modelling