PMO - Information Security and Data Privacy

Role:This isn t a typical PMO role

• You will lead security and data privacy programs that directly strengthen trust, resilience, and compliance at scale across the organization
• As the PMO - Information Security & Data Privacy Lead, you will design and drive end-to-end security initiatives across engineering, risk, controls, and operations, ensuring measurable risk remediation
• You ll work closely with Infosec leadership, Technology Risk, and Operations to identify, govern, and prioritize improvement initiatives aligned with frameworks like ISO 27001 and internal security roadmaps
• What Youll Do: Lead security programmes and initiatives by designing, and managing comprehensive tracks across all infosec verticals Work closely with the leadership team within Information security to drive the process to identify, record and govern new improvement initiatives and risk remediation activities Drive security programs covering engineering, risk, controls, operations to chart a clear path to achieve risk remediation Collaborate with Information Security, Technology Risk and Operations teams to identify and manage risks, evolve controls, ensure compliance with applicable frameworks (eg)
• ISO27001, internal key controls, security roadmap) Own the roadmap by defining success metrics, targets and delivery milestones; monitor progress and report to stakeholders Drive Infosec and data privacy initiatives and tasks across teams, ensuring early visibility of blockers and need for support Proactively, assess impacts, and present clear mitigation plans to leadership Continuously refine, monitor and report security templates, operational metrics so they remain simple, repeatable and provide good insights to the businessYou ll Excel in
• This Role If You: 6 to 9 years in programme or project management roles, with 4+ years in security, risk or compliance Proven ability to translate complex security and risk concepts for a leadership , engineering and Operations audience Proven track record working in programme management in FinTech, payments or financial services
• Hands-on experience managing outsourced security providers and tracking SLAs/KPIs to ensure delivery Good familiarity with implementing cyber/security frameworks (e
• g
• NIST CSF, ISO27001) Strong ability to design straightforward processes that enable security teams to ensure timely delivery of agreed outcomes Excellent at distilling complex security risks into clear, concise updates for both technical teams and senior stakeholders Comfortable working with senior management across cross functional teams to drive completion of cross functional activities as part of security enhancement programmes
• Strong focus on programme management discipline, timely delivery of milestones, and proactive monitoring for risks and challenges that need to be addressed
• Excellent communication skills and ability to work with senior stakeholders across functions to drive security outcomesNice to haves:
• Broad understanding of security domains and controls, and risks Experience leveraging automation to accelerate programme delivery Exposure to a financial services environment Previous experience in Big4 audit/consulting Familiarity with crypto and blockchain technologies