IAM re-architecture-cybersecurity

Role & responsibilities

The consultant will perform the following tasks:

• Establish and manage a cybersecurity programme structure across all roadmap activities.
• Develop and maintain integrated project plans, timelines, and milestones.
• Track progress and ensure alignment with agreed deliverables and timelines
• Define and manage dependencies across projects and stakeholders
• Design and implement project governance frameworks, including reporting templates and escalation mechanisms
• Prepare executive-level reporting (dashboards, status updates, risk summaries)
• Support preparation of materials for CIO and Management Executive Committee (MEC)
• Identify, track, and manage project risks, issues, and dependencies
• Proactively escalate critical risks and support mitigation planning
• Coordinate with external vendors and internal stakeholders (IT, Ethics & Risk, Sourcing, Finance, Business Units)
• Facilitate workshops, meetings, and decision-making forums
• Provide delivery coordination support across key initiatives, including:
• IAM re-architecture
• Data protection / DLP initiatives
• MSSP and SOC enhancements
• Business Continuity and crisis testing
• Vendor security and third-party risk
• Introduce and standardize project management tools, templates, and best practices
• Support the development of RFPs, RFQs, and procurement documentation
• Coordinate inputs from technical, legal, procurement, and business stakeholders
• Support vendor Q&A processes and communication management
• Coordinate and facilitate evaluation of vendor proposals, including scoring consolidation and evaluation reporting
• Track procurement timelines and ensure alignment with project delivery

Deliverables

The consultant will deliver:

• Cybersecurity programme governance framework
• Consolidated roadmap execution plan and project portfolio view
• Standardized project templates and reporting dashboards
• Weekly and monthly programme status reports
• Risk and issue tracking logs
• Executive-ready progress updates and presentations
• Documentation supporting RFP/RFQ processes and evaluation outcomes
• Final handover documentation, including status of all initiatives and recommendations

Acceptance of deliverables will be subject to review and sign-off by the CISO or designated representative.

Performance and Reporting

Performance will be assessed based on:

• Timely delivery of agreed milestones
• Quality and clarity of reporting to leadership
• Effectiveness in managing risks, issues, and dependencies
• Level of coordination across stakeholders and vendors
• Adoption of project management practices within the function
• Efficiency and quality of RFP/RFQ coordination processes

The consultant will provide:

• Weekly progress updates
• Monthly executive summaries
• Ad hoc reporting as required

Experience /

Skills

Mandatory

• Minimum 8 10 years of experience in project / programme management
• Proven experience delivering IT and / or cybersecurity initiatives.
• Experience managing complex, multi-stakeholder environments.
• Experience working with vendors and external partners.
• Experience supporting RFP / RFQ development and vendor selection processes.

Desirable:

• Experience in cybersecurity domains such as IAM, SOC, Data protection, or cloud security.
• Familiarity with enterprise IT and security environments (e.g. Microsoft ecosystem, SIEM, IAM, PAM tools.

Education

• Degree in IT, Business Administration, Project Management or related field.
• Equivalent professional experience will be considered.

Certifications (Preferred)

• PMP, PRINCE2, or equivalent
• Agile / Scrum certifications are an advantage.