Project Manager (DevSecOps / Application Security Managed Services)

Quick Facts

• Role: Project Manager for a DevSecOps / Application Security managed service

• Focus: Operational delivery, SLA/OLA control, governance, reporting, and program change (including AI enablement)

• Collaboration: Managing Director sponsor and enterprise cybersecurity leadership

Description

You will lead the day-to-day operations of an Application Security / DevSecOps managed service, working through ServiceNow intake, approvals, engineering assignment, and prerequisite readiness before SLA timers start. You will manage SLA/OLA deadlines in advance, run program governance (RAID, decision log, change control), and deliver weekly one-page statuses to both the client and the delivery partner. You will also coordinate the program change roadmap and AI/automation initiatives (with required client prerequisites and licensing/vendor dependencies).

Responsibilities

• Operate the managed service daily: intake and approval queue in ServiceNow, classify requests, assign a responsible engineer, ensure prerequisites (test environments, accounts, documentation) are complete before the timer starts.

• Monitor SLA and OLA timers proactively using application/ticket identifiers and timestamps; maintain boards/trackers based on source data (ServiceNow, ASPM).

• Prepare weekly one-page program status for the client cybersecurity leadership (milestones, capability enablement, KPIs) and a delivery status for the partner (scope, change requests, work on demand, basis for invoicing).

• Run program governance: RAID and decision log, 90-day plan and re-baseline, meeting calendar (standups, weekly reviews, steering), MoM with owners and actions, and escalations (missing access, test accounts, licenses, application owner unavailability).

• Manage onboarding and team coverage: access proof for new people (VDI, PAM, tool accounts), manage absences, and ensure primary/secondary coverage across lanes (SAST, DAST, SCA, PT, API, AI, threat modeling).

• Co-lead program changes and AI implementation: maintain client-side requirements and prerequisites register (environments, integration accounts, data approvals, named approvers), track decisions and milestones, and communicate with client leadership.

• Coordinate licensing and vendor dependencies for SAST/SCA/DAST/API security with the partner (renewals, activations, technical workshops).

• Control and document scope: what is included in the service, what becomes a change request, and what is work on demand—ensuring everything is visible and invoiced/charged correctly.

Requirements

• 5+ years as PM / Service Delivery Manager / PMO for IT or cybersecurity services; 2+ years specifically in managed cybersecurity or DevSecOps services (AppSec, vulnerability management, SOC, penetration testing).

• Strong understanding of ticket content and severity—not just project “status.”

• Experience with managed services and SLA/OLA; ITIL practices including request fulfillment, change management, and CAB.

• Hands-on work with ServiceNow or Jira Service Management; KPI reporting from source data.

• Enterprise governance experience: RAID, decision log, change control, planning and re-baseline, steering committee, and the ability to produce/defend a one-pager in English.

• Advanced Excel/Power Query; preferred experience with Python or Power BI for reporting automation and data consistency checks.

• English C1 for daily communication with client and partner and meetings in their time zone.

• Data assertiveness: ability to clearly state “out of scope” and drive remediation to avoid SLA breaches.

• Willingness to travel to Abu Dhabi more frequently than engineers (approx. once per quarter) and complete client-side NDA/standard checks.

Benefits

• 18,000–25,000 PLN net + VAT per month (B2B), depending on experience; long-term program.

• Remote work from Poland with company-paid trips to Abu Dhabi.

• Direct collaboration with the Managing Director sponsor and enterprise client cybersecurity leadership.

• Ready-made PMO tools to scale operations (report/plan generators, SLA/OLA boards, RAID/decision logs, project knowledge base).

• Real influence on the service operating model and on AI process implementation (data-driven decisions).

• Flexible working hours outside the client meeting rhythm.