Job DescriptionThe role is responsible for managing the Compliance and Security workstream within a complex telecom transformation program. The Project Manager will coordinate SOC 2, ISO/IEC 27001, GDPR, and related security readiness activities across Compliance, Security, IT, Engineering, Network Operations, Architecture, and delivery teams.
The position focuses on translating compliance objectives, audit timelines, evidence requirements, control gaps, and remediation actions into a structured execution plan with clear owners, milestones, dependencies, risks, and decision points.
Responsibilities:- Build and maintain the Compliance and Security workstream plan, including milestones, deliverables, owners, dependencies, risks, assumptions, and acceptance criteria.
- Coordinate SOC 2, ISO/IEC 27001, GDPR, and related audit-readiness activities across business and technical stakeholders.
- Maintain the compliance task registry, ensuring tasks are prioritized, assigned, tracked, and reported.
- Drive evidence-readiness activities, including evidence requests, collection tracking, gap follow-up, and control-owner alignment.
- Support mapping of policies, procedures, and operational practices against relevant compliance and security control requirements.
- Track gaps between documented processes and actual operational execution, especially where evidence is missing or incomplete.
- Coordinate remediation planning across Change Management, Incident Management, Access Management, Vulnerability Management, Asset Management, Logging and Monitoring, Backup and Restore, Business Continuity, Disaster Recovery, and security architecture.
- Facilitate workshops, control reviews, evidence sessions, and stakeholder checkpoints.
- Maintain RAID logs, decision logs, evidence trackers, issue registers, and executive-ready status updates.
- Escalate audit-readiness risks, missing ownership, access blockers, evidence gaps, and scope ambiguities.
- Coordinate with adjacent program streams, including network transformation, ITSM, tooling, architecture governance, change governance, and program management.
- Support Change Request preparation where Compliance and Security scope extends beyond the approved program baseline.
Qualifications- 7+ years of project or program management experience in compliance, security, IT governance, infrastructure, telecom, cloud, or enterprise technology environments.
- Experience managing SOC 2, ISO/IEC 27001, GDPR, or comparable audit-readiness and control remediation initiatives.
- Practical understanding of security controls, evidence collection, audit preparation, control ownership, and remediation tracking.
- Experience coordinating cross-functional teams across Security, Compliance, IT, Engineering, Network Operations, Architecture, and business stakeholders.
- Ability to structure delivery where scope, documentation, ownership, and operational reality are incomplete or evolving.
- Strong experience with RAID management, executive reporting, stakeholder coordination, and dependency management.
- Familiarity with Jira, Confluence, ServiceNow, SharePoint, Microsoft Project, Smartsheet, Azure DevOps, GRC platforms, or similar tools.
- Strong communication skills, with the ability to clarify ownership, challenge assumptions, and drive closure.
- Relevant certifications such as PMP, PRINCE2, Agile, CISA, CISM, CRISC, CISSP, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor are desirable.
Nice to have:- Experience coordinating evidence across fragmented platforms, acquired entities, or distributed operational teams.
- Understanding of ITSM, CMDB, observability, security architecture, and operational governance.
What Success Looks Like:- Compliance and Security scope is structured into a clear delivery plan with owners, dates, evidence needs, and acceptance criteria.
- SOC 2, ISO/IEC 27001, GDPR, and related control activities are actively tracked and reported.
- Evidence collection starts early enough to support audit timelines.
- Gaps between documented processes and actual execution are visible, prioritized, and addressed.
- Control owners understand what evidence is required and when it is due.
- Risks, blockers, missing ownership, and scope changes are escalated early.
- Compliance and Security activities remain aligned with adjacent program streams and governance forums.
- Scope expansion is identified and routed through the appropriate Change Request process.
- The program receives a practical, evidence-backed audit-readiness path rather than a documentation-only view.
- Completed improvements transition into sustainable operational routines with clear ownership and repeatable evidence collection
Additional InformationWe offer:- Culture of Relentless Performance: join an unstoppable technology development team with a 99% project success rate and more than 30% year-over-year revenue growth.
- Competitive Pay and Benefits: enjoy a comprehensive compensation and benefits package, including health insurance, and a relocation program.
- Work From Anywhere Culture: make the most of the flexibility that comes with remote work.
- Growth Mindset: reap the benefits of a range of professional development opportunities, including certification programs, mentorship and talent investment programs, internal mobility and internship opportunities.
- Global Impact: collaborate on impactful projects for top global clients and shape the future of industries.
- Welcoming Multicultural Environment: be a part of a dynamic, global team and thrive in an inclusive and supportive work environment with open communication and regular team-building company social events.
- Social Sustainability Values: join our sustainable business practices focused on five pillars, including IT education, community empowerment, fair operating practices, environmental sustainability, and gender equality.
* Miratech is an equal opportunity employer and does not discriminate against any employee or applicant for employment on the basis of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity, or any other protected status under applicable law.
