Technical Project Manager (Security)

At Keepit, the company focuses on cloud data protection by providing an immutable, historical archive of data in systems like Microsoft 365, Google Workspace, Salesforce, Entra ID, Dynamics 365, and Zendesk. It protects customers against threats including ransomware and accidents, managing hundreds of petabytes of data reliably. The workplace is located in Kraków city centre, with a hybrid work mode implied by the office location and job description.

• 5+ years managing technical projects or programs, preferably in security, infrastructure, or IT operations.
• Proven ownership of backlog and roadmap with prioritization, dependency tracking, and delivery against commitments.
• Working understanding of security operations including detection, alert triage, incident response, and vulnerability management.
• Power-user fluency or ability to quickly achieve fluency in Jira and Confluence.
• Experience coordinating coverage schedules or on-call rotations.
• Strong written English skills with the ability to produce usable documentation.

Nice to have:

• Exposure to security maturity or coverage frameworks such as NIST CSF or MITRE ATT&CK.
• Experience facilitating post-incident reviews, tabletop exercises, or purple team engagements.
• Experience selecting or rolling out IT service management platforms.
• Familiarity with change management for production systems.
• Vendor management or procurement coordination experience.

Daily security operations:

• Support daily security operations in deploying and implementing operational security priorities.
• Ensure schedule coverage for phishing triage and SIEM monitoring.
• Manage the on-shift rotation for incident response.
• Plan for PTO and holiday coverage gaps well in advance.
• Maintain a documented shift handover.

Roadmap and backlog management:

• Own the security roadmap and ensure the team stays on track with annual commitments.
• Maintain and prioritize the SOC's project backlog in coordination with security engineering and detection engineering leads.
• Track project risks, dependencies, and blockers; escalate when needed.
• Report roadmap and project status to leadership.

Coordination and communication:

• Lead communication, planning, and coordination with other teams and stakeholders.
• Manage vendor and tool procurement timelines including renewals, PoCs, and onboarding.
• Manage change requests and change management for production security tooling.

Process and documentation:

• Own documentation of processes, standard operating procedures, and runbooks, keeping them current.
• Define and track a maturity model (e.g., NIST CSF, MITRE ATT&CK, or custom).
• Run periodic gap assessments and turn findings into roadmap items.
• Coordinate tabletop exercises and purple team engagements; track remediation.
• Benchmark against industry peers or frameworks annually.

Operational KPIs and metrics:

• Own metrics like mean time to detect (MTTD), mean time to respond (MTTR), alert-to-incident ratio, false positive rate, and detection coverage by use case.

Please submit your CV in English to facilitate the review process. The employer requests not to provide sensitive personal data during application. Processing of personal data is subject to their privacy policy. Whistleblowing procedure instructions are provided for reporting misconduct or irregularities.