Project Professional

About the role

The Project Professional supports the planning, execution and delivery of complex projects through all specific phases, in alignment with BT Group strategies and external customer contractual requirements.

What you’ll be doing

• Lead and manage multiple Identity and Access Management (IAM), Identity Governance (IGA), and broader Cyber Security initiatives, ensuring successful delivery against agreed scope, timelines, budget, and business objectives.

• Drive audit, risk, compliance, and regulatory remediation programs, ensuring alignment with internal control frameworks, security policies, and industry standards. 

• Represent the security team in governance forums, steering committees and cross-functional security discussions, providing regular updates on program progress, operational metrics, and key performance indicators (KPIs).

• Analyse and prioritize security, risk, compliance, and business requirements from stakeholders, translating them into actionable delivery plans and roadmaps. 

• Own and manage Jira portfolios, boards, backlogs, sprint planning, dependency tracking, and reporting across multiple IAM and Cyber Security initiatives. 

• Establish and maintain effective program governance, including RAID (Risks, Assumptions, Issues, and Dependencies) management, status reporting, stakeholder communications, and executive reporting. 

• Collaborate with engineering, operations, risk, compliance, audit, and business teams to ensure successful execution of security transformation and continuous improvement initiatives. 

• Monitor and report on program KPIs, security metrics, audit findings, control effectiveness, and remediation progress to support informed decision-making and governance oversight.

Essential Skills / Experience

• Proven experience leading enterprise-wide Cyber Security programs, portfolios, or transformation initiatives across multiple teams and business units.

• Strong program management expertise, including planning, budgeting, resource management, dependency tracking, governance, reporting, RAID management, and executive stakeholder engagement.

• High Level understanding of cyber security domains, including Identity & Access Management (IAM), Cloud Security, Application Security, Data Protection, and Incident Response.

• Experience developing and executing cyber security roadmaps aligned with business objectives, risk appetite, and regulatory requirements.

• Ability to establish and operate effective governance forums, steering committees, risk reviews, audit committees, and security reporting structures.

• Experience managing security audits, regulatory reviews, risk assessments, remediation programmes, and control effectiveness initiatives.

• Proven experience managing third-party vendors, managed security service providers, system integrators, and commercial contracts is a plus. 

• Ability to define and monitor security KPIs and KRIs, including vulnerability remediation, control compliance, security incidents, audit findings, onboarding progress, and risk reduction metrics.

• Strong stakeholder management skills with the ability to influence senior executives, business leaders, architects, engineers, compliance teams, risk teams, and external partners.

• Experience leading geographically distributed cyber security teams and driving collaboration across multiple workstreams.

• Knowledge of Agile methodologies for security initiatives.

• Strong communication, presentation, negotiation, and executive reporting skills, with the ability to translate complex technical issues into business outcomes.