The Security PMO Lead is responsible for governance, planning, execution oversight, and reporting across all security workstreams within a complex separation or transition programme.
Working alongside senior security leadership, this role ensures that security strategy and decisions are translated into structured delivery plans, governance forums, readiness checkpoints, and auditable outcomes. The role acts as the central coordination point for security delivery across discovery, design assurance, migration waves, and transition into business-as-usual or managed security operations.
Key Responsibilities
Security Governance & Execution
* Establish and run effective security governance forums and working groups.
* Define governance structure, decision rights, escalation paths, and cadence.
* Maintain clear logs for decisions, actions, risks, issues, and dependencies.
* Ensure governance is outcome-driven and delivery-focused.
Senior Security Enablement
* Support senior security leadership with decision packs, options analysis, and risk summaries.
* Track and enforce execution of security decisions across delivery teams and partners.
* Provide clear traceability from decisions through to implementation.
Programme Planning & Coordination
* Develop and manage the security delivery plan aligned to programme milestones.
* Coordinate discovery outputs, readiness planning, and migration wave activities.
* Manage cross-workstream security dependencies.
* Integrate security planning and reporting into the central PMO.
Security Design & Readiness Assurance
* Govern the review and approval of security designs and control requirements.
* Ensure security controls across applications, infrastructure, identity, network, cloud, and SaaS are reviewed, approved, tracked, and implemented.
* Define and enforce security readiness criteria and pre-migration checkpoints.
* Provide oversight of early security build and control onboarding activities.
Risk, Artefacts & Reporting
* Own and maintain the security risk register and mitigation plans.
* Maintain a structured security artefact catalogue and evidence tracking.
* Produce regular status reports, dashboards, and readiness summaries.
* Present security delivery status and risk posture to senior stakeholders.
Transition to BAU / Managed Services
* Coordinate with delivery partners and managed service providers.
* Support security transition planning and handover.
* Deliver transition artefacts including readiness checklists and handover packs.
* Ensure a controlled transition into BAU or managed security operations.
Experience & Skills
Essential
* 10+ years’ experience in PMO, programme governance, or delivery management.
* Experience delivering security governance within complex transformation, separation, or transition programmes.
* Proven ability to operate as a senior PMO supporting security leadership.
* Strong understanding of core security domains (IAM, cloud, network, GRC, data protection).
* Experience managing multi-vendor and cross-workstream dependencies.
* Strong stakeholder management, reporting, and executive communication skills