1. Cyber PMO Leadership & Program Delivery

• Lead and manage cybersecurity programs and projects (e.g., Zero Trust, IAM enhancements, vulnerability remediation, cloud security initiatives).
• Develop project charters, schedules, milestones, resource plans, and budgets.
• Establish and maintain PMO governance, standards, templates, and reporting frameworks.
• Track progress, dependencies, deliverables, KPIs, and budget performance across all cyber initiatives.
• Facilitate steering committee meetings and present status updates to leadership.

2. Security Controls Governance & Compliance

• Maintain oversight of cybersecurity controls aligned to frameworks such as NIST CSF/800-53, ISO 27001, CIS Controls, PCI-DSS, SOC 2, GDPR, HIPAA, or internal standards.
• Partner with control owners to ensure controls are designed, implemented, validated, and monitored.
• Create and maintain control documentation, narratives, test scripts, and evidence requirements.
• Conduct periodic control assessments, control testing, and control health checks.
• Identify compliance gaps and drive remediation plans through PMO-managed projects.

3. Risk Management & Issue Remediation

• Maintain cyber risk registers, track issues, manage risk scoring, and oversee remediation timelines.
• Identify, analyze, and escalate risks arising from projects, technology changes, or control deficiencies.
• Ensure audit findings are addressed, tracked, and closed on schedule.
• Conduct root-cause analysis to strengthen long-term security posture.