AVEVA is a global leader in industrial software. Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life – such as energy, infrastructure, chemicals and minerals – safely, efficiently and more sustainably.
We’re the first software business in the world to have our sustainability targets validated by the SBTi, and we’ve been recognized for the transparency and ambition of our commitment to diversity, equity, and inclusion. We’ve also recently been named as one of the world’s most innovative companies.
If you’re a curious and collaborative person who wants to make a big impact through technology, then we want to hear from you! Find out more at AVEVA Careers.
For more information about our privacy policy and how to manage cookies, visit our Privacy Policy.
Job Name: Senior Security Project Manager
Organization/department: Digital Security
Reports to: Programme Manager – Global Security Operations
Location: Kuala Lumpur, Malaysia and London, United Kingdom
Job Overview
The Senior Security Project Manager is a seasoned professional responsible for overseeing and managing complex, high-impact Digital Security projects within AVEVA. This role works to ensure the team’s success in delivery, primarily by helping to identify and especially remove impediments impacting the team’s ability to deliver approved Digital Security controls / services to meet operational and strategic transformation objectives using appropriate behaviours, techniques, and frameworks.
Roles and Responsibilities
Dimensions
Demonstrated history of successful project delivery in a waterfall and agile environment, especially in projects related to Information and Cyber Security
Strong planning skills – schedules, resource allocation, issue management, tracking, etc.
Stakeholder engagement with strong interpersonal and collaborative skills as well as highly effective communication skills
Situational Leadership
Strong motivation, initiative and able to multi-task
Formal Agile, Scrum and/or Project Management training
Primary Duties
Analyse the strategic objectives and select, implement appropriate project management methodology and framework (Agile / Waterfall, Scrum, Safe etc.)
Lead and manage delivery team/s to successfully deliver all key milestones and product outcomes within scope, on time, on budget and to expected standards
Manage and develop stakeholder relationships including steering committees, through effective communications, documentation, negotiation, and issues management to ensure delivery of security controls and the achievement of outcomes and benefits such as enhanced security posture, risk reduction etc.
Derive and felicitate all project governance meetings, regular “Sprint Ryhthm” as applicable
Proactively identifies and helps to resolve issues that impact achievement of team’s project deliverables or sprint commitments
Report and escalate issues such as variances and manage delivery by exception to ensure issues are understood and resolution actions, owners identified
Develop strategies for the continuous monitoring, evaluation and improvement of all aspects of control delivery including but not limited to, analysis of customer feedback, facilitation of agile meetings and artefact production, identification and mitigation of risks
Support the delivery of all governance materials, artefacts and meetings to ensure security controls are delivered and maintained as per AVEVA Digital Security standards
Ensures the delivery team is fully functional, cooperating, and productive
Shields the delivery team from external interferences and removes obstacles
Administers and manages business relationships with the project’s external consultants and third parties ensuring they meet their project objectives
Suggests and implements improvements to project management, security control deployments and other organizational processes
Continues engagement with the Digital Security Control Owner and Control Operator, provides the project team a concise vision and creates a positive team environment
Service Strategy, Delivery and Continues Service Improvement (Service Design, Service Transition and Service Operation)
Define and monitor service SLAs/KPIs
Client engagement (SPOC for internal and external clients) and facilitate campaigns
Establish good working relationships with internal and external stakeholders, third party suppliers, Auditors etc.
Important Working Relationships
Program, Project and Delivery Stakeholders (Control Owners, Control Operations etc.)
Business Units (IT, Legal, Finance, Product, R&D, Global Customer Services, Delivery Services etc.)
Enterprise Architecture and Security Architecture teams
Security and IT Governance, Risk and Compliance Teams
Human Centric Security and Workplace Management Teams
IT Business Relationships Managers and Product Line Heads
Business Analysts and other Delivery Leads
IT Platforms and Operations team as relevant to projects
External suppliers and service providers
Required Qualifications:
Educational Qualifications
Bachelor’s degree in Information Technology, Computer Science, Cyber Security, Engineering or a related field (Master's degree preferred)
Project Management training and certifications such as PMP, APM, CSM, Prince II or equivalent is preferred
Knowledge and extensive experience with project management methodologies (e.g., Agile, Scrum, Waterfall).
Exceptional leadership, communication, and negotiation skills.
Proficiency in project management software and tool such as Microsoft Project, Azure DevOps, Trello, JIRA etc.
Strong analytical and strategic thinking capabilities
Experience
5+ years of experience in IT and Cyber Security project management, with a demonstrated history of handling large-scale, high-impact projects.
Extensive experience of project management methodologies and frameworks (PMI, Agile, Scrum, Safe, PRINCE II etc.)
Demonstrated experience managing project managers and leading cross-functional delivery teams
Technical Competency
In-depth knowledge of IT infrastructure and Cyber Security domains
Understanding of Cyber Threat Detect and Response capabilities and services, Data and Network Security, Vulnerability Management, Identity and Access Management capabilities is desired
Understanding of Leading Internal Standards on Information and Cyber Security such as ISO27001, NIST Cyber Security Framework is desired
Experience in delivery of SIEM tools such as Microsoft Sentinel, Splunk, QRadar etc.is a plus
Extensive Knowledge of Project Planning Tools such as Microsoft Project, Azure DevOps, Trello, JIRA etc.
Ability to lead and motivate others; demonstrating empathy and knowledge of personality types
Demonstrated sensitivity to working in a political environment and to interacting with senior leadership.
Exceptional verbal and written communication skills
Expertise in setting and managing customer expectations
Effective influencing and negotiating skills in an environment where this role may not directly control resources
Strong knowledge and understanding of business needs, with the ability to establish and maintain a high level of customer trust and confidence
Thorough understanding of current and emerging technologies and how other enterprises are employing them to drive digital business
Demonstrated ability to develop and execute a project resource plan that ensures that the right people are in the right place doing the right things at the right time
Desirable Training and Certifications
Cyber Security Certifications such as CompTIA Security+, Certified Information Security Manager (CISM), Certified Information Security Professional (CISSP), Certified in Governance, Risk and Compliance (CGRC), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Auditor (CISA) is desired.
Occupational Personality
Strong analytical and problem-solving skills with strong written and verbal communication and a good attention to detail
Ability to work both independently and collaboratively as a team member, be curious and to ask questions and share knowledge.
Ability to interact with AVEVA's personnel at all levels and across all business units and organizations, and to understand business objectives and values.
A strong customer/client focus, with the ability to manage expectations appropriately, to provide a superior customer/client experience and build long-term relationships.
A strong passion about security, Project Management, Delivery Services, be curious with a keenness to learn and develop own skills and knowledge outside of the working environment.
Confident in recording and presenting key findings and conclusions to different levels of the business.
Career Path
Senior Security Project Manager, with the skills, behaviours, and determination to succeed can progress to roles such as Security Program Manager, Head of Security Delivery Services, Program / Portfolio Director, or specialise in roles overseeing Security Strategy, Governance and Compliance
AVEVA requires all successful applicants to undergo and pass a comprehensive background check before they start employment. Background checks will be conducted in accordance with local laws and may, subject to those laws, include proof of educational attainment, employment history verification, proof of work authorization, criminal records, identity verification, credit check. Certain positions dealing with sensitive and/or third party personal data may involve additional background check criteria.
AVEVA is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business.
Come and join AVEVA to create the transformative technology that enables our customers to engineer a better world.