Cybersecurity Project Manager

About the role

Hexa Consulting is seeking a Cybersecurity Project Manager to join a client’s team in Lisbon. The role operates in a hybrid model (three days onsite) within the industrial and construction materials sector, driving security initiatives across OT and IT environments.

Key responsibilities

• Lead end‑to‑end cybersecurity projects, from scoping and risk assessment to delivery and follow‑up.
• Coordinate OT‑focused security deployments across multiple industrial sites and international stakeholder groups.
• Prepare and present steering committee materials, progress updates, and executive‑level reports.
• Track deliverables, risks, dependencies, budgets, KPIs and action plans.
• Support remediation actions after audits, assessments or security reviews.
• Manage RFI/RFP processes for cybersecurity solutions and coordinate vendors and service providers.
• Translate technical security concepts into clear messages for non‑technical audiences.

Required profile

• Minimum 3 years of project‑management experience, preferably in cybersecurity, IT, OT or industrial settings.
• Proven ability to coordinate diverse technical, operational and business stakeholders.
• Strong autonomy, proactivity and ownership in complex delivery contexts.
• Excellent interpersonal skills and confidence engaging senior and technical stakeholders.
• Professional working proficiency in English (B2 or higher).

Required skills

• Project management
• PMO practices
• Reporting and KPI tracking
• Cybersecurity fundamentals
• OT and industrial systems awareness
• IT fundamentals
• Risk and issue management
• Budget tracking
• Steering committee preparation
• RFI and RFP coordination
• Vendor and service‑provider coordination
• Security policy and compliance awareness
• NIS2
• GDPR
• ISO/IEC 27001 knowledge

What we offer

• Hybrid work model (3 days onsite in Lisbon).
• Competitive base salary range €16 000‑€24 000 gross per year.
• Potential total compensation up to €32 000 per year.
• Opportunity to work on high‑impact cybersecurity projects in an industrial environment.