Job Title: Technical Security Project Manager

About Us

SipraHub specializes in cybersecurity, artificial intelligence, and business process redesign, leveraging deep expertise built through years of working with Fortune 500 companies across the US and UK. We deliver secure, scalable, and innovative technology solutions that empower organizations to accelerate digital transformation and harness the full potential of AI.

Location: Remote

Position Overview

We are seeking an experienced Technical Security Project Manager to oversee and coordinate security remediation and patch management activities across server infrastructure, endpoint security, legacy application security, and security automation. The role will drive integrated planning, execution tracking, risk and dependency management, stakeholder coordination, and delivery governance to accelerate remediation of outstanding security vulnerabilities while minimizing operational disruption.

The role provides delivery oversight across four workstreams: Server Security & Patch Management Specialists; Endpoint Security & Patch Management Specialists; Legacy Application Security Developers ; and Security-Focused Developers / Automation Engineers . It works closely with Infrastructure, Endpoint Management, Application Development, Security, and relevant functional managers to ensure remediation activities are prioritized, coordinated, tracked, and completed in alignment with agreed security priorities.

This is a delivery management and coordination role, not a hands-on engineering role. Technical execution remains with the respective specialists and developers, and existing functional reporting lines remain unchanged, including the dotted-line relationship to Chris Gorris for security priorities and oversight. Decisions on vulnerability severity and security risk acceptance remain with the appropriate Security, technical, or business authority.

Key Responsibilities:

Integrated Planning and Delivery Governance :

- Establish and maintain an integrated security remediation plan covering server security, endpoint security, legacy application remediation, and security automation.

- Coordinate workstream plans, milestones, target dates, priorities, and dependencies, and maintain a consolidated view of delivery progress across all four positions.

- Track planned versus completed remediation activities, escalate slippage against agreed commitments, and run regular workstream reviews with clear action owners and target dates.

Security Remediation Backlog and Prioritization :

- Coordinate the review and prioritization of outstanding security vulnerabilities, patching activities, application security findings, and audit remediation items.

- Work with Security and technical leads to agree remediation priorities based on severity, exploitability, business criticality, operational risk, and agreed deadlines.

- Track remediation from identification through implementation, validation, and closure, ensuring overdue, blocked, and high-priority items receive appropriate management attention.

- Facilitate decisions when competing priorities, technical constraints, or resource dependencies affect delivery.

Cross-Functional Coordination :

- Coordinate activities across Infrastructure, Endpoint Management, Application Development, Security, and relevant functional managers.

- Facilitate collaboration between legacy application remediation team and security automation team.

- Identify dependencies between infrastructure patching, endpoint remediation, application changes, testing, and security tooling, and ensure the appropriate technical teams are aligned before activities that may affect business-critical services.

- Resolve coordination gaps and escalate decisions requiring management intervention.

Risk, Issue, and Dependency Management :

- Maintain a consolidated RAID log of risks, assumptions, issues, and dependencies, tracking mitigation actions, owners, due dates, and escalation status.

- Identify risks related to remediation delays, technical constraints, patch deployment, application stability, resource availability, and incomplete security findings.

- Ensure potential business and operational impacts are assessed with the relevant technical owners before implementation, and escalate critical blockers and unresolved risks promptly.

Change, Testing, and Operational Readiness Coordination :

- Coordinate remediation schedules with the relevant change management and release processes, working with application and infrastructure owners to minimize operational disruption.

- Ensure testing, validation, implementation, and rollback planning activities are accounted for by the responsible technical teams.

- Track remediation outcomes, failed remediation attempts, recurring issues, and follow-up actions, and ensure evidence of successful implementation or validation is available where required.

Metrics, Reporting, and Management Visibility :

- Develop and maintain a consolidated security remediation dashboard across all four workstreams, tracking indicators such as open and closed items, outstanding critical and high-priority findings, patch compliance and completion rates, overdue items and aging, milestones, blocked items and escalations, and validation and closure status.

- Provide periodic status updates to management and stakeholders, highlighting delivery trends, recurring bottlenecks, resource constraints, and decisions required.

- Ensure reported metrics are traceable to agreed sources and validated by the appropriate technical owners, with targets agreed and the relevant Security and technical stakeholders.

Stakeholder Communication and Governance :

- Organize workstream checkpoints, integrated status reviews, and management escalations.

- Communicate priorities, delivery progress, risks, and expected completion dates, and document decisions, actions, owners, and follow-up commitments.

- Support alignment between Security priorities and infrastructure and application delivery constraints.

Continuous Improvement :

- Identify opportunities to improve remediation workflows, reporting, coordination, and delivery predictability, including traceability, validation, evidence collection, and closure processes.

- Promote appropriate use of automation to reduce manual remediation effort and improve tracking.

- Capture recurring issues and lessons learned across server, endpoint, application, and automation workstreams.

Required Qualifications :

- Proven experience managing technical delivery across multiple infrastructure, endpoint, application, and security workstreams.

- Experience coordinating vulnerability remediation, patch management, and security improvement initiatives.

- Strong experience managing delivery plans, milestones, RAID logs, dependencies, escalations, and stakeholder communications.

- Working understanding of the security remediation lifecycle, with the ability to coordinate with technical specialists on implementation and validation.

- Experience preparing management dashboards, progress reports, and delivery metrics.

- Ability to coordinate technical teams while respecting functional reporting lines and delegated decision-making authority.

- Strong communication, facilitation, problem-solving, and stakeholder management skills.

Preferred Skills :

- Exposure to vulnerability management platforms, security dashboards, and remediation tracking tools.

- Familiarity with CrowdStrike findings, vulnerability scanning, patch compliance, and security audit remediation workflows.

- Understanding of Linux and Windows server administration, endpoint management, and application security concepts.

- Familiarity with secure software development practices, dependency scanning, and application security testing.

- Exposure to security automation, security APIs, and integrations that improve remediation efficiency.

- Experience coordinating remediation activities affecting business-critical applications and infrastructure.

- Familiarity with Agile delivery practices, risk-based prioritization, and continuous improvement.

- Experience using project tracking, reporting, and dashboard tools to provide management visibility.