Cybersecurity Project Manager

About Us: Prometric is a leading provider of technology-enabled testing and assessment solutions to many of the world’s most recognized licensing and certification organizations, academic institutions, and government agencies. We support more than 7 million test takers annually at our testing locations in 180 countries around the world. With over three decades of experience working with clients of all sizes across a multitude of industry sectors, our mission is to design and deliver the highest quality and most innovative testing solutions anytime, anywhere.

Job Title: Cybersecurity Project Manager Reports To: Chief Information Security Officer Department: Information Security Location: Kuala Lumpur

SUMMARY

We are seeking a highly organized, proactive, and business-focused Cybersecurity and Compliance Project Manager to join the Information Security team. This role is responsible for planning, coordinating, and delivering cybersecurity, risk, governance, and compliance initiatives across a global environment. The position will help translate security priorities into clear project plans, measurable outcomes, and executive-ready reporting while ensuring work is delivered on time, within scope, and aligned to enterprise risk and compliance objectives. The ideal candidate will have strong project management discipline, a working understanding of cybersecurity and compliance programs, and the ability to coordinate across technical, operational, audit, vendor, and business stakeholders. This role requires excellent communication skills, attention to detail, sound judgment, and the ability to drive progress in a fast-moving, globally distributed environment.

DUTIES & RESPONSIBILITIES

• Cybersecurity and Compliance Project Delivery:

◦ Plan, coordinate, and manage cybersecurity, risk, compliance, and governance projects from initiation through closure. ◦ Develop and maintain project plans, schedules, milestones, dependencies, RAID logs, status reports, and executive-ready updates. ◦ Coordinate work across Information Security, IT, infrastructure, application development, operations, audit, legal, privacy, vendors, and business teams. ◦ Support delivery of initiatives related to security operations, identity and access management, vulnerability management, incident readiness, client assurance, audit remediation, and compliance readiness. ◦ Track risks, issues, decisions, action items, and dependencies, escalating blockers with clear options and recommended paths forward. ◦ Ensure projects follow established governance, change management, documentation, and evidence retention standards. ◦ Translate security requirements and technical workstreams into practical business milestones, outcomes, and reporting. ◦ Maintain clear communication with stakeholders on scope, timelines, risks, deliverables, and expected business impact.

• Compliance, Risk, and Reporting Support:

◦ Support programs aligned to frameworks and obligations such as ISO 27001, SOC 2, PCI DSS, internal policies, client security requirements, and other regulatory or contractual commitments. ◦ Coordinate audit and assessment activities, including evidence requests, remediation tracking, management responses, and follow-up actions. ◦ Create and maintain dashboards, scorecards, and reporting artifacts that demonstrate project progress, risk reduction, compliance readiness, and control improvement. ◦ Partner with security leaders to prepare concise updates for executive leadership, audit stakeholders, client-facing teams, and operational leadership. ◦ Drive continuous improvement by identifying recurring project delivery issues, process gaps, and opportunities to standardize security program execution.

QUALIFICATIONS & EXPERIENCE

Essential Qualifications & Skills

• Proven experience managing technology, cybersecurity, risk, compliance, or audit-related projects in a complex organization.
• Strong understanding of project management fundamentals, including scope, schedule, dependencies, risk management, stakeholder communication, and status reporting.
• Working knowledge of cybersecurity and compliance concepts, including access management, vulnerability management, incident response, security controls, audit evidence, and risk remediation.
• Familiarity with security and compliance frameworks such as ISO 27001, SOC 2, PCI DSS, NIST, or similar control frameworks.
• Ability to translate technical security topics into clear business language for non-technical stakeholders.
• Experience coordinating cross-functional work across technical teams, business stakeholders, vendors, auditors, and leadership.
• Experience creating project plans, meeting agendas, decision logs, action trackers, RAID logs, dashboards, and executive-level status updates.
• Strong proficiency with Microsoft Office and project management or workflow tools such as Microsoft Project, Azure DevOps, Jira, Wrike, Smartsheet, or similar platforms.
• Excellent written and verbal communication skills, with the ability to drive clarity, accountability, and follow-through.
• Highly organized, detail-oriented, and able to manage multiple priorities with minimal supervision.

Desired Qualifications & Experience

• Bachelor’s degree in information technology, cybersecurity, business, project management, or a related field, or equivalent professional experience.
• Project management certification or formal training, such as PMP, PRINCE2, Agile, Scrum Master, or equivalent.
• Security, risk, or compliance certification a plus - Security+, CISM, CRISC, CISA, ISO 27001, ITIL, or equivalent.
• Experience working in regulated, audit-driven, client-facing, or globally distributed environments.
• Experience supporting security assessments, client assurance requests, control remediation, incident readiness, or third-party risk activities.

Prometric is an Equal Employment/Affirmative Action employer. We do not discriminate in hiring based on sex, gender identity, sexual orientation, race, color, religious creed, national origin, physical or mental disability, protected Veteran status, or any other characteristic protected by federal, state, and local law.