IT Security Project Manager

Reports To: IT Security Program Manager

Department: Information Technology

Location/Schedule: Hybrid (preference for Minnetonka, MN candidates)

Classification: Full-Time / Exempt

Who We Are:

Old Republic is a leading specialty insurer that operates diverse property & casualty and title insurance companies. Founded in 1923 and a member of the Fortune 500, we are a leader in underwriting and risk management services for business partners across the United States and Canada. Our specialized operating companies are experts in their fields, enabling us to provide tailored solutions that set us apart.

Position Overview:

The IT Security Project Manager is responsible for planning, executing, and delivering cybersecurity and information security initiatives across the organization. This role partners with Information Security, Infrastructure, Application Development, Risk Management, Compliance, and Business stakeholders to ensure security projects are completed on time, within scope, and within budget while meeting organizational security requirements and regulatory obligations.

The IT Security Project Manager manages multiple concurrent projects, including security technology implementations, regulatory compliance initiatives, risk remediation projects, identity and access management projects, cloud security enhancements, vulnerability management initiatives, and incident response improvements.

Essential Job Functions:

• Lead information security and cybersecurity projects from planning through delivery.
• Develop project plans, schedules, budgets, resource plans, and status reports.
• Manage scope, risks, issues, dependencies, and change control.
• Lead project meetings, steering committees, and executive updates.
• Deliver projects aligned with business objectives and security standards.
• Coordinate cybersecurity technology and control implementations.
• Support IAM, PAM, endpoint security, vulnerability management, SIEM, cloud security, data protection, and security monitoring initiatives.
• Track remediation from security assessments, audits, penetration tests, and risk reviews.
• Support security road map development and strategic initiatives.
• Partner with Security, Risk, Compliance, and Audit teams on regulatory and compliance projects.
• Align project activities with security policies, standards, and governance requirements.
• Monitor project risks and coordinate mitigation.
• Liaise among technical teams, business stakeholders, vendors, and leadership.
• Confidently communicate project status, risks, milestones, and decisions to executive leadership.
• Facilitate cross-functional resolution of project issues and dependencies.
• Manage vendor relationships and third-party project activities.
• Track project spending and resource use.
• Coordinate internal and external resources to meet project objectives.
• Support business case development and project prioritization.

Qualifications:

• 5+ years of project management experience successfully planning, executing, and delivering complex IT initiatives within defined scope, schedule, and budget requirements.
• Demonstrated experience managing complex, cross-functional projects in a matrixed environment, coordinating priorities, resources, dependencies, and deliverables across technical and business teams.
• Strong written and verbal communication, presentation, and stakeholder management skills, with the ability to translate technical information for diverse audiences and build alignment across teams.
• Experience applying Agile, Waterfall, and Hybrid project management methodologies, selecting and adapting the appropriate approach based on project scope, complexity, and business needs.
• Proficiency with project management and work-tracking tools such as Microsoft Project, Azure DevOps, Jira, and Smartsheet to manage schedules, tasks, risks, dependencies, resources, and status reporting.
• Experience preparing and delivering clear, concise executive-level communications and reports on project status, milestones, risks, issues, dependencies, budget, and decisions requiring leadership attention.

Preferred Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field, providing a strong foundation in technology, security, and business operations.
• 2+ years of experience supporting cybersecurity or information security programs, including security technology implementations, risk remediation, compliance initiatives, or operational security improvements.
• Strong understanding of cybersecurity principles, security controls, and risk management practices, with the ability to apply them when planning projects, evaluating risks, coordinating remediation, and supporting compliance requirements.

ORI is an Equal Opportunity Employer. ORI provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.