Security Project Manager

Company Description

About CyberArk:

CyberArk (NASDAQ: CYBR), is the global leader in Identity Security. Centered on privileged access management, CyberArk provides the most comprehensive security offering for any identity – human or machine – across business applications, distributed workforces, hybrid cloud workloads and throughout the DevOps lifecycle. The world’s leading organizations trust CyberArk to help secure their most critical assets. To learn more about CyberArk, visit our CyberArk blogs or follow us on Twitter, LinkedIn or Facebook.

Job Description

We are seeking an experienced Security Project Manager to join our dynamic team. The ideal candidate will be responsible for overseeing the Security Software Development Lifecycle (SSDL) process within various R&D departments, ensuring compliance, and generating security posture dashboards. This role requires a deep understanding of security practices, project management skills, and the ability to collaborate across multiple teams to maintain and enhance our security standards.

• SSDL Process Management:
• Track and manage different parts of the Security Software Development Lifecycle (SSDL) across various R&D departments.
• Ensure all projects adhere to security standards and compliance requirements throughout the SSDL process.
• Compliance Verification:
• Verify that all projects meet internal and external compliance requirements.
• Conduct regular audits and assessments to ensure ongoing compliance.
• Security Posture Dashboard:
• Develop and maintain security posture dashboards for each team.
• Provide detailed insights into training, internal penetration testing (PT), external PT, vulnerability management, and other SSDL-related areas.
• Training and Awareness:
• Coordinate security training programs for R&D teams.
• Ensure all team members are up-to-date with the latest security protocols and practices.
• Penetration Testing Coordination:
• Oversee the scheduling and execution of internal and external penetration tests.
• Collaborate with security testers and R&D teams to address and remediate identified vulnerabilities.
• Vulnerability Management:
• Manage the identification, tracking, and resolution of security vulnerabilities.
• Work with development teams to prioritize and address vulnerabilities in a timely manner.
• Reporting and Communication:
• Generate comprehensive reports on the security posture of each team.
• Communicate findings, risks, and recommendations to stakeholders and senior management.
• Continuous Improvement:
• Stay updated with the latest security trends and technologies.
• Implement best practices and continuous improvement initiatives to enhance the security posture of the organization.
  
  

• Minimum of 5 years of experience in project management or a similar role.
• Proven track record of managing security initiatives within an R&D environment.
• Strong understanding of the Security Software Development Lifecycle (SSDL) and related compliance requirements.
• Excellent project management skills, with the ability to handle multiple projects simultaneously.
• Proficient in security assessment tools and techniques.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Ability to work collaboratively with cross-functional teams.
• Bachelor’s degree in a relevant field.
• Relevant certificationsin security are highly desirable.
• Technical Knowledge:
• Familiarity with security frameworks and standards (e.g., ISO 27001, NIST).
• Knowledge of software development practices and tools.
  
  

• Master’s degree in Information Security or a related field.
• Experience with security posture dashboards and reporting tools.
• Knowledge of risk management and incident response practices.