Security Delivery Lead - Cyber Project Manager

Introduction
At IBM CIC, we provide technical and industry expertise to a wide range of public and private sector clients in the UK. In this role, you will work in one of our IBM Consulting Client Innovation Centers (Delivery Centers) and lead the end‑to‑end delivery of complex cyber programmes across public and private sector environments.

• Training opportunities from classroom to e‑learning, mentoring and coaching programmes, and the chance to gain industry‑recognised certifications
• Regular promotion opportunities to advance your career
• Ongoing feedback and checkpoints throughout the year
• Diversity & Inclusion as an essential part of our culture
• A culture that welcomes ideas for growth and innovation
• Internal recognition programmes for peer‑to‑peer appreciation and manager‑to‑employee recognition
• Support for work‑life balance, including flexible working, sabbatical programmes, paid paternity leave, maternity leave and an innovative maternity returners scheme
• Traditional benefits: 25 days holiday (in addition to public holidays), private medical, dental & optical cover, online shopping discounts, an Employee Assistance Program, life assurance, and a group personal pension plan with an additional 5% of your base salary paid monthly

• Lead full lifecycle delivery of cyber security projects, ensuring scope, quality, schedule, and cost targets are achieved
• Establish and run project governance, including RAID management, dependency tracking, change control, financial reporting, and stage‑gate reviews
• Coordinate cross‑functional teams—security consultants, engineers, architects, PMO, suppliers, and client stakeholders—to deliver aligned outcomes
• Drive secure‑by‑design delivery, embedding security requirements into programme and platform decisions
• Manage risks, issues, and decisions, maintaining clear logs, proactive mitigation, and transparent escalation pathways
• Collaborate with technical leads across IAM, Infrastructure, SIOC, OT, Dev Sec Ops , and GRC to ensure deliverables are technically accurate and cohesive
• Prepare and deliver project documentation, including initiation documents, plans, status reports, commercial updates, and post‑implementation reviews
• Engage senior stakeholders with structured, business‑aligned communication on delivery progress, risk posture, and operational readiness
• Manage third‑party suppliers, subcontractors, and MSSPs, ensuring commercial performance and contractual alignment
• Support financial forecasting and budget management, ensuring accurate cost tracking, billing, and change management
• Ensure compliance with cyber and regulatory standards relevant to the project (e.g., ISO 27001, NIST CSF, NIS/NIS2, CAF, CE+)
• Contribute to continuous improvement, feeding back lessons learned, process enhancements, and best practices across Future Now delivery teams

None

Bachelor's Degree

• Proven experience delivering complex cyber or technology projects in fast‑paced, matrixed environments
• Strong understanding of cyber security domains such as IAM, infrastructure security, cloud security, SOC/SIEM, or GRC (deep technical expertise not required)
• Demonstrable experience managing RAID, change control, planning, reporting, dependencies, and budgets
• Hands‑on project leadership, not just oversight—demonstrated ability to drive momentum, unblock delivery, and ensure outcomes land
• Ability to translate technical detail into business language, enabling effective communication with engineering teams and executive stakeholders
• Experience in regulated industries (public sector, defence, finance, utilities, or CNI) is highly beneficial
• Excellent stakeholder management skills, including steering group facilitation and senior leadership engagement
• Familiarity with secure‑by‑design concepts, governance uplift, controls alignment, incident readiness, or related cyber initiatives
• Experience managing vendors or MSSPs, including contract adherence, work‑package delivery, and performance tracking
• Strong documentation and reporting capability, producing clear and structured plans, summaries, and business cases