Cybersecurity Services Project Manager

Crux Security is a comprehensive cybersecurity firm that blends GRC SaaS solutions with high-touch security services. They are seeking a Cybersecurity Services Project Manager to oversee penetration testing projects and cybersecurity engagements, requiring strong project management skills and a solid understanding of security testing processes.

Responsibilities:

• Manage end-to-end security testing and assessment projects, including penetration tests, risk assessments, and compliance audits
• Serve as the primary point of contact for clients, ensuring clear communication of project timelines, deliverables, and expectations
• Define project scope, establish milestones, and ensure engagements are completed on time and within budget
• Work with security consultants, engineers, and external partners to allocate resources efficiently
• Identify and mitigate potential project risks and roadblocks to ensure smooth execution
• Review reports, findings, and remediation plans to ensure accuracy and adherence to industry best practices
• Monitor client satisfaction, collect feedback, and implement improvements to enhance the overall client experience
• Ensure projects align with industry standards such as NIST 800-171, CMMC, CIS, ISO 27001, PCI DSS, and SOC 2

Requirements:

• 5+ years of project management experience in cybersecurity, IT services, or consulting
• Strong understanding of penetration testing, vulnerability assessments, security audits, and GRC frameworks
• Experience managing multiple concurrent security projects with various stakeholders
• Familiarity with security tools and methodologies
• Excellent communication and client relationship management skills
• Proficiency in project management tools
• Ability to work cross-functionally with security engineers, consultants, and clients
• Exceptional english (native), presentation, and report writing skills
• Certifications such as PMP, CAPM, Sec+, or Agile/Scrum
• Experience managing security testing engagements in regulated industries (finance, healthcare, government, etc.)
• Helpful to have a deep understanding of cloud security (AWS, Azure, GCP)