Role Overview:This role is for an OT Security Program Manager responsible for owning and maintaining the master program plan across four active security workstreams, including NAA remediation, software download restrictions, vulnerability remediation, and USB data transfer controls. The manager will facilitate agile pod coordination, manage the team's work backlog, and ensure timely delivery against program priorities. Key aspects include stakeholder reporting, managing external dependencies, and overseeing change and hypercare management.
Key Responsibilities:- Own and maintain the master program plan across all four active security workstreams.
- Maintain the program Gantt chart, ensuring task owners, dependencies, milestones, and target dates are accurate.
- Track progress against key milestones including RC4 pilot test, allow/deny list activation, and full Phase 2 completion.
- Identify and manage task dependencies across workstreams, site partners, InfoSec, Active Directory teams, ServiceNow, and external vendors.
- Maintain a live risk and issue log, escalating blockers in a timely and structured manner.
- Facilitate regular sprint planning, stand-ups, and retrospectives for the agile pod of five OT Security Engineers.
- Manage the team's work backlog, prioritizing items in alignment with program milestones and stakeholder commitments.
- Coordinate workload distribution across site partners to ensure balanced coverage and tracked site-specific dependencies.
- Work closely with the Business Analyst to align stakeholder engagement timelines with engineering execution.
- Prepare and deliver regular program status updates to Head of Lab Solutions, Program Manager, and Stu Director, Lab Systems.
- Produce clear, concise reporting packs for leadership audiences including workstream RAG status, milestone progress, open risks, and upcoming decision points.
- Maintain the Lab & OT Security Confluence page tracking content.
- Support Josh Bishop in preparing for leadership reviews with CISO and CIDO sponsors.
- Track and manage external dependencies with InfoSec, Active Directory teams, ServiceNow, and technology vendors including BeyondTrust and CrowdStrike.
- Coordinate vendor engagement scheduling across sites, ensuring access approvals and engagement records are tracked.
- Monitor the service account demand intake pipeline once activated.
- Plan and coordinate hypercare periods following major program milestones.
- Track and close out hypercare findings, ensuring issues are logged, owned, and resolved.
- Maintain a lessons-learned log across all workstreams, contributing to continuous improvement.
Required Skills:- Strong command of program planning tools and techniques (Gantt charts, risk logs, RAID registers, dependency mapping, milestone tracking).
- Proficiency in project management tooling such as Jira, Microsoft Project, Smartsheet, or equivalent.
- Familiarity with both agile (Scrum/Kanban) and traditional waterfall delivery approaches.
- Excellent written and verbal communication skills, able to produce crisp, accurate status reports and present program health clearly to senior leadership.
- Strong meeting facilitation skills, including structured stand-ups, planning sessions, and risk reviews with distributed teams.
- Able to build credibility quickly with both technical engineers and non-technical business stakeholders.
- Confluence or equivalent wiki platform for maintaining living program documentation.
- ServiceNow or equivalent ITSM platform for demand tracking and change management.
- Microsoft Office suite (Excel, PowerPoint, Word) for reporting, Gantt management, and communications.
- Highly organized with a strong bias for structure and clarity.
- Proactive and anticipatory, surfacing risks and dependencies before they become issues.
- Collaborative and low-ego, effective influence without authority.
- Resilient and adaptable, able to replan quickly when priorities shift.
Qualifications:- Bachelor's degree required (B.S. in Business, Information Systems, Engineering, or a related field, or equivalent practical experience).
- PMP, PRINCE2, or equivalent project management certification preferred.
- 3-6 years of relevant project or program management experience, preferably within technology, IT security, or a regulated life sciences environment.
- Demonstrated experience managing concurrent workstreams with multiple owners, dependencies, and stakeholders in a complex organizational environment.
- Experience working with or coordinating agile delivery teams, including facilitation of sprint ceremonies.
- Proven track record of producing clear, structured program reporting for senior and executive audiences.
- Experience managing vendor relationships and external dependencies as part of a delivery program.
- Prior experience in a pharmaceutical, biotech, or similarly regulated industry is strongly preferred.
- Ability to coordinate across global, multi-site teams including US East Coast (Boston), US West Coast (San Diego), and UK (Oxford).
- Comfortable operating across multiple time zones.
- Willingness to participate in or support hypercare periods.
Preferred Skills:- PMP, CAPM, PRINCE2, or SAFe certification is a plus.
- Familiarity with security or IT operations tooling (CrowdStrike, BeyondTrust, Active Directory) is a meaningful advantage.
- IT Service Management Consulting
