Title: Information Security Project Manager

Location: Mumbai

Time Zone: Eastern Standard Time /Pacific Standard Time

1           Job Description

1.1                        Overview

DNEG’s expanding Information Security (InfoSec), Governance, Risk and Compliance (GRC) and Data Privacy programmes have the requirement to add Information Security Project Manager to the expanding global team. The role will be ultimately responsible for the successful management and maintenance of the Information Security project management function within DNEG.

The InfoSec team are responsible for ensuring that the confidentiality, integrity, and availability (CIA) of its, and client’s, confidential data, PII and systems and services are always maintained. It’s for this reason that a Project Manager (PM) function is required to work collaboratively with the team, peers, and business stakeholders to ensure that all the InfoSec projects are aligned, maintained, and managed effectively to meet the requirements from a tactical roadmap perspective, and to ensure that projects are successfully delivered to complement overall successful delivery of the strategic InfoSec program.

1.2                        Mandatory Requirements and Expectations

An experienced individual that works in a methodical and concise manner is required to successfully manage the InfoSec program at DNEG.

●        Have excellent inter-personal, written and presentation skills.

●        Working closely with the CISO and the team to successfully prioritize and an ensure delivery of Information Security and Data Privacy requirements and initiatives.

●        Experience of working within a dynamic and technically diverse environment.

●        Demonstrable experience of delivering, maintaining, managing multiple projects and/or initiatives, and effectively delivering required reporting activities.

●        A good understanding of business protocols and process.

●        Experience of working within the M&E industry is highly desired.

2           Duties and Operational Responsibilities

●        Manage, maintain, and ultimately mature the InfoSec project management function.

●        Work proactively with the InfoSec team to ensure that all project deliverables are suitably tracked and reported against.

●        Understand project management methodologies and associated practices.

●        Have the capability to work independently and as part of a team.

●        Have experience in project forecasting, problem resolution and presentation delivery.

●        Utilize effective task management, communication, and have excellent stakeholder engagement skills.

●        Work in close partnership, and collaborate with peers, business and production representatives and associated teams.

●        Ultimately manage all reporting initiatives as they relate to the InfoSec and Data Privacy programmes.

o         This includes managing and maintaining monthly and QBR reporting requirements.

3           Job Requirements

3.1                        Mandatory Job Requirements

A successful candidate will meet the majority of the requirements listed below and will be able demonstrate suitable experience in competencies in each of the following:

●        One to three years, plus/minus, of working within a project management function.

●        Be able to demonstrate technical understanding be comfortable working across numerous disciplines.

●        Highly motivated and bring a forward thinking and highly collaborative approach to InfoSec project management function.

●        Demonstrable experience of project management requirements, e.g.:

o         Planning and associated forecasting activities.

o         Project tracking and monitoring.

o         Leading and delivery of project/program reporting.

o         Utilize communication skills to present and manage meetings within the team, with stakeholders and program sponsors.

●        Knowledge of Information/Cyber Security processes and methodologies.

●        Knowledge of risk management.

●        A strong team player with a positive professional manner.

●        Experience and demonstrable, high-level knowledge, of the following:

o         Working within either a hybrid or cloud native environment and their associated concepts and application.

o         Understanding of InfoSec and Compliance frameworks.

o         Understanding of software development methodologies, e.g., Agile and DEVSECOPS etc.

o         Understanding of Data Privacy legislation, e.g., GDPR

o         Understanding of audit processes and the importance of tracking and ensuring suitable corrective action is suitably tracked and maintained.

●        Experience of working collaboratively with a company PMO function and ensuring that InfoSec and Data Privacy requirements are suitably addressed as part of the wider list of PMO tracked projects and initiatives.

●        Document and create both project specific and quarterly business review (QBR) reporting material as it relates to the InfoSec and Data Privacy programs.

3.2                        Desired Job Requirements

A successful candidate will have experience with the desired requirements listed below and will be able demonstrate suitable experience in competencies in each of the following:

●        Understanding of the following project management methodologies:

o         Critical Chain Methodology

o         Agile Methodology

o         Waterfall Methodology

o         Scrum Methodology

●        Technically proficient and understand the following:

o         Vulnerability Management

o         Audit processes and procedures

o         Project Management toolsets

3.3                        Education

●        A bachelor’s degree in IT or Computer Science is desirable, but not essential.

●        Any Project Management certifications, e.g., Project Management Professional (PMP), PMI Agile Certified Practitioner (PMI-ACP), PRINCE2 would be desirable.