全职 Senior Project Manager, Information Security 工作, 薪水, Shopee 公司招聘中 - Ricebowl

About The Team

Information Security protects Sea Group's businesses, including Shopee, Monee and its regional digital banks, across infrastructure security, application security, offensive security, security operations, data security and governance. Most of our work runs as long-running, cross-team programs that depend on engineering, IT and business teams across Southeast Asia, China and the Americas. We are looking for a Lead Project Manager in Singapore to keep this portfolio on track and clearly reported to senior leadership.

Job Description

Lead the Information Security project management team, covering programs across all security sub-teams.

• Own portfolio tracking, quarterly OKRs and the monthly program status report to senior leadership, with clear owners, dates, risks and asks, backed by data.
• Drive cross-team programs end to end: plan milestones, manage dependencies and secure committed dates from engineering, IT and business partners.
• Define clear ownership and accountability for cross-team programs, so every deliverable has a named owner.
• Coordinate compliance and audit programs such as SOC 2, PCI DSS, ISO 27001 and MAS TRM, including control owners, evidence, timelines and remediation of findings.
• Track red-team, penetration-test and vulnerability findings to closure across security and engineering teams.
• Run program cadences, challenge unrealistic timelines with facts, risk and priority, and escalate early with options and a clear ask.
• Improve project management processes, trackers and dashboards, using automation and AI to reduce manual follow-up.
  
  

Requirements

• At least 5 years of full time project or program management, including at least 2 years leading a team of project managers.
• Proven delivery of complex, multi-team programs in information security, infrastructure, cloud or IT risk.
• Hands-on experience with at least one external audit or certification, such as SOC 2, PCI DSS, ISO 27001 or a financial regulator's technology risk review.
• Strong stakeholder management across cultures and time zones, persistent in driving commitments while keeping relationships strong.
• Able to run many programs in parallel and make clear priority trade-offs.
• Working knowledge of security and infrastructure concepts, and a structured, data-driven way of working.
• PMP, PgMP, CISA, CISM or CISSP certification, experience in banking or other regulated industries are a plus.