Cybersecurity Project Manager (DevSecOps Managed Service)

Quick Facts

• Role: Cybersecurity Project Manager (DevSecOps Managed Service)
• Focus: Managed Application Security / DevSecOps delivery with ServiceNow SLA/OLA clocks, governance (RAID/decision log), and AI-enabled process change.
• Work setup: Remote from Poland; travel to Abu Dhabi about once per quarter (~1 week) at company expense.
• Language: C1 English for enterprise client/partner communication.

Description

Run the day-to-day operations of a managed Application Security / DevSecOps service: intake and approvals in ServiceNow, ticket classification, prerequisite readiness before starting SLA clocks, and proactive SLA/OLA tracking using source data. Prepare weekly one-page status for the client’s cybersecurity leadership and delivery/commercial status for the partner, while maintaining enterprise governance (RAID and decision log, 90-day plan and re-baseline, steering cadence). Co-lead program changes including new security lanes, AI-assisted evaluation workflows, onboarding and coverage across SAST/DAST/SCA/PT/API/AI, and dependency coordination (licenses/vendors).

Responsibilities

• Daily service operations in ServiceNow: intake, approvals queue, classification, assignment of a single responsible engineer, and prerequisite completeness (test environment, accounts, documentation) before the SLA clock starts.
• Proactive SLA/OLA monitoring: track by ticket number, requester name, and time; maintain boards/trackers based on source data (ServiceNow, ASPM) rather than copied dashboards.
• Weekly one-page reporting for client cybersecurity management (milestones, capability enablement, KPI metrics) and partner status (delivery scope, change requests, on-demand work, basis for invoicing).
• Program governance: RAID and decision log, 90-day plan with re-baseline, meeting calendar (standups, weekly reviews, steering), MoM with actions and owners, and escalations for missing access/test accounts/licenses or unavailable application owners.
• Onboarding and team coverage: ensure access for new hires (VDI, PAM, tool accounts), handle absences, and maintain primary/secondary coverage for SAST/DAST/SCA/PT/API/AI/threat modeling lanes.
• Coordinate program changes and AI implementation: collect customer requirements and prerequisites (environments, integration accounts, data permissions, named approvers), set milestones, and communicate decisions to client leadership.
• Coordinate licensing and vendor dependencies with the partner (SAST/SCA/DAST/API security): renewals, activations, deadlines, and technical workshops.
• Control scope vs change requests vs on-demand work, ensuring traceability and correct commercial handling.

Requirements

• 5+ years experience as PM / Service Delivery Manager / PMO for IT or cybersecurity services.
• At least 2 years in cybersecurity or DevSecOps services (AppSec, vulnerability management, SOC, penetration testing) with ability to interpret ticket content beyond status.
• Experience delivering managed services with SLA/OLA and ITIL practices (request fulfilment, change management, CAB).
• Hands-on work with ServiceNow or Jira Service Management and KPI reporting from source data.
• Enterprise governance experience: RAID, decision log, change control, re-baseline, steering committee; ability to create and defend a one-pager in English.
• Advanced Excel and Power Query; advantage if you use Python or Power BI for automation and data consistency checks.
• English C1 for daily communications and formal correspondence; readiness to meet in the client’s time zone (Persian Gulf, +2h).
• Assertive, data-driven scope and escalation management (e.g., enforcing prerequisites and preventing missed SLA deadlines).
• Willingness to travel to Abu Dhabi more frequently than engineers (~once per quarter, about a week) and comply with NDA and client-side verification.

Benefits

• 18,000–25,000 PLN net + VAT monthly (B2B), depending on experience.
• Long-term program.
• Remote work from Poland; business travel to Abu Dhabi covered by the company.
• Direct collaboration with the Managing Director/account sponsor and client enterprise cybersecurity leadership.
• PMO-ready tools and templates provided (report/plan generators, SLA/OLA boards, RAID/decision logs, project knowledge base).
• Real impact on service operational model and AI implementation approach.
• Flexible working hours outside the client meeting rhythm.