Governance, Risk and Compliance Project Manager

This is a fully remote position, open to applicants in India.

📋 Description

• Take charge of information security projects from the initial phase to completion.

• Establish objectives, scope, deliverables, milestones, resource requirements, success metrics, and acceptance criteria.

• Transform security strategies, risk treatment plans, audit results, regulatory obligations, and operational demands into actionable project plans.

• Oversee schedules, action logs, decision records, risk and issue logs, budgets, status updates, and project documentation.

• Lead working sessions, eliminate barriers, and ensure follow-through on commitments.

• Collaborate with Information Security, Information Technology, Privacy, Legal, Quality, Vendor Management, Procurement, Clinical Operations, and other business units.

• Work closely with security architects, engineers, analysts, and technology owners to ensure timely delivery.

• Recognize and manage delivery and security risks, issues, dependencies, mitigation strategies, and escalations.

• Guarantee that projects comply with Office of the CISO governance, security, privacy, quality, change management, and documentation standards.

• Manage reviews, approvals, evidence, and readiness measures prior to implementation.

• Provide updates on progress, decisions, risks, financials, and anticipated outcomes to executives and stakeholders.

• Simplify security and technology issues into understandable business terms within a clinical research context.

• Oversee third-party contributions to security initiatives, including deliverables, dependencies, performance, security responsibilities, and issue resolution.

• Plan stakeholder engagement, communication, training, implementation readiness, and transition to operations.

• Maintain project data and contribute to portfolio dashboards, capacity planning, prioritization, and leadership reporting.

• Utilize lessons learned to enhance project management practices, templates, and standards.

• Execute additional responsibilities as assigned.

⛳️ Requirements

• Bachelor’s degree in information security, cybersecurity, information technology, business, project management, or a related discipline; a combination of education and directly relevant experience may be considered equivalent.

• A minimum of five years of project management experience, including the independent delivery of multiple information security or cybersecurity projects to completion.

• Proven experience in managing security initiatives such as identity and access management, vulnerability remediation, security tools, cloud security, data protection, third-party risk, security operations, compliance remediation, or security transformation.

• Familiarity with fundamental information security concepts and common enterprise technology environments.

• Ability to interpret architecture diagrams, technical specifications, control designs, testing outcomes, and implementation strategies.

• Experience leading cross-functional teams and vendors during planning, execution, implementation, and transition to operations within a matrixed organization.

• Strong expertise in project management methodologies, including scope, schedule, budget, resources, risks, issues, dependencies, change control, governance, and benefits tracking.

• Exceptional written, verbal, facilitation, and presentation skills.

• Experience creating executive-level status reports and decision-making materials.

• Proficiency in project planning, collaboration, reporting, and presentation software.

• Experience in developing portfolio metrics and dashboards is preferred.

• Experience in a clinical research organization, life sciences, healthcare, pharmaceutical, or another regulated sector is highly preferred.

• PMP, PRINCE2, Certified ScrumMaster, or similar project management certification is preferred.

• Security certifications such as CISSP, CISM, Security+, or equivalent are advantageous.

🏝️ Benefits

• A collaborative and inclusive workplace.

• Opportunities for growth and professional development.

• Chance to learn, develop, and contribute to the future of clinical research.