Information Security Project Manager/Analyst | Contract

Information Security Project Manager/Analyst | Contract

We are seeking a Senior Information Security Project Manager/Analyst to join an Information Security Program Management team within a financial services organization. This is a hands-on Project Manager / Business Analyst hybrid role for a security-fluent professional who can drive delivery while also understanding the underlying cybersecurity problems, requirements, risks, and dependencies.

This is not a task-tracking or box-checking PM position. The ideal candidate will serve as a security-fluent requirements liaison between technical requestors and technical delivery teams—turning ambiguous requests into clear requirements, defining scope, building stakeholder consensus, developing roadmaps, and driving initiatives through implementation.

Position Details

• Employment Type: Contract
• Location: San Francisco, CA – 3 days/week onsite
• Remote: Open for exceptional candidates
• Remote candidates: Must be able to work Pacific Time business hours
• Openings: 1

What We're Looking For

The hiring team is weighting project management discipline and analytical/security capability equally. We are looking for someone who can manage delivery and think critically about security problems.

The right candidate will be able to

• Understand cybersecurity terminology, concepts, and InfoSec operating models.
• Work effectively between technical requestors and technical delivery teams.
• Elicit, analyze, document, and validate requirements.
• Define in-scope and out-of-scope items and establish success criteria.
• Identify risks, prerequisites, dependencies, and interdependencies.
• Facilitate stakeholder discussions and build consensus.
• Frame the actual problem before jumping to a solution.
• Translate requirements into practical roadmaps and delivery plans.
• Drive issues to resolution and maintain accountability through implementation.

Key Project Domains

Projects may span multiple areas of Information Security, including

• Cloud & AI Security
• Cyber Incident Defense
• Threat & Vulnerability Management
• Identity & Access Management (IAM)
• Data Protection & Data Loss Prevention (DLP)
• Governance, Risk & Compliance (GRC)

Key Responsibilities

Project Management & Delivery

• Plan, coordinate, track, and deliver cybersecurity initiatives from concept through implementation.
• Establish milestones, timelines, decision points, and delivery plans.
• Identify and secure required resources.
• Proactively identify risks and issues and drive them toward resolution.
• Escalate appropriately when delivery commitments are at risk.
• Ensure initiatives transition successfully into business-as-usual operations.

Must-Have Qualifications

• Bachelor's degree.
• 5+ years of cybersecurity / Information Security experience.
• Strong security fluency—candidates should understand cybersecurity terminology, concepts, culture, and how InfoSec teams operate.
• Strong project management and delivery experience.
• Proven requirements elicitation, analytical, documentation, and stakeholder facilitation experience.
• Advanced/proficient experience using Jira and Confluence.
• Strong written and verbal communication skills.
• Excellent organizational and analytical skills.
• Ability to work independently, take initiative, and follow through.

Important: Security Fluency Over Certifications

This role does not require the candidate to have personally performed hands-on vulnerability management, IAM, DLP, or other security engineering functions.

What matters is that cybersecurity knowledge is embedded in their professional experience. Candidates should be able to clearly explain a security-related project they have managed and demonstrate that they understand the security problem and solution, rather than simply having managed the project schedule.

Candidates coming from generic project management backgrounds without meaningful InfoSec exposure are unlikely to be a fit.

Strongly Preferred

• SAFe / Scrum Master experience
• Experience with PI planning or quarterly-increment delivery models
• Experience working in environments using approximately 12-week increments and 2-week sprints
• Financial services, investment management, asset management, or other regulated-industry experience
• Experience using AI tools to improve project management, analysis, documentation, reporting, or security workflows
• Experience across cloud security, vulnerability management, IAM, DLP/data protection, incident response, GRC, or AI security

Financial services experience is a nice-to-have, not a strict requirement. The stronger differentiator is demonstrated InfoSec fluency and the ability to operate effectively with technical security teams.

Ideal Candidate Profile

The strongest candidates will come from backgrounds such as

Information Security Project Manager | Cybersecurity Project Manager | Security Program Manager | Information Security Business Analyst | Cybersecurity Business Analyst | Security PM/BA | Technical Project Manager – Information Security

We are looking for a hands-on, analytical, security-fluent PM/BA who can ask the right questions, clarify ambiguity, build consensus, and independently drive cybersecurity initiatives to completion.

Remote candidates must be available during Pacific Time business hours. This is a non-negotiable requirement for remote consideration.