Abnormal AI is seeking an experienced Project Manager with a primary focus on supporting Governance, Risk, and Compliance (GRC) initiatives across the CIO organization. This role serves as the primary delivery partner for the GRC function, while also supporting broader, cross-functional initiatives spanning Security, IT, Privacy, and other CIO-aligned teams as business priorities evolve.
As an AI-native cybersecurity company, Abnormal approaches delivery with an emphasis on automation, intelligent tooling, and continuous optimization. This role is responsible for driving the successful execution of GRC and CIO-sponsored initiatives, agilely adapting project management practices to project complexity, and leveraging AI-enabled tools and insights to improve planning, execution, and reporting. Projects will vary in size, scope, and maturity, requiring sound judgment and flexibility in how rigor and structure are applied.
The ideal candidate brings strong project management fundamentals, comfort operating in ambiguity, and a working understanding of GRC and security-driven initiatives. You thrive in fast-moving environments, bring a growth mindset, and continuously seek better, more efficient ways to deliver outcomes.
Who you are- 4+ years of experience in project management, technical project management, or program delivery, with exposure to GRC, Security, or compliance-adjacent initiatives
- A strong project manager who can lead large, cross-functional, and often technical initiatives, translating complex requirements into clear, actionable delivery plans
- Highly skilled in documentation and reporting, with the ability to maintain clear processes, status reporting, dashboards, and project artifacts across a portfolio of work
- Detail-oriented, process-minded, and motivated to bring structure and clarity to complex, multi-stakeholder efforts
- Results-oriented, collaborative, and self-directed, with the ability to adapt quickly in a high-growth, fast-changing environment
- Intellectually curious and a problem solver, constantly looking for ways to improve execution, simplify workflows, and increase impact through automation and smarter tooling
- An exceptional communicator who can collaborate effectively with both technical and non-technical stakeholders and represent GRC and CIO initiatives with credibility and clarity
- Demonstrated experience managing cross-functional, security- or compliance-adjacent projects
- Technically adept, able to leverage a technical foundation to gain trust, accelerate delivery, and partner effectively with engineering, security, and platform teams
- Working knowledge of governance, risk, and compliance concepts, or experience supporting security, audit, or regulatory initiatives
- Own and drive the GRC project portfolio, partnering closely with the GRC team to define project goals, deliverables, success criteria, and execution plans across initiatives
- Support delivery of broader CIO-sponsored initiatives as needed, flexing across Security, IT, Privacy, Legal, Finance, HR, and other cross-functional teams
- Manage end-to-end project delivery, including scoping, planning, execution, dependency management, risk mitigation, and project closure, tailoring rigor and methodology based on project complexity
- Translate complex technical requirements into project plans with clearly defined milestones, owners, dependencies and timelines
- Coordinate and support internal and external audits and certification efforts, including timeline management, requirements gathering, evidence tracking, and remediation closure
- Define, implement, and track KPIs and delivery metrics that measure execution effectiveness, efficiency, and stakeholder satisfaction, using insights to continuously improve delivery practices
- Design and iterate on repeatable project management practices for intake, prioritization, risk management, and portfolio-level reporting
- Proactively identify and manage risks, dependencies, and tradeoffs, enabling informed, risk-based decision-making when priorities or constraints shift
- Maintain clear, consistent communication with project teams, stakeholders, and leadership on status, risks, progress, and outcomes
- Contribute to strategic, annual, and quarterly planning activities, supporting roadmap development, capacity planning, and cross-functional alignment
- Leverage AI-enabled tools and approaches to improve planning accuracy, automate reporting, enhance visibility, and reduce manual project administration
- 4-6 years of professional experience in technical project management, delivering cutting-edge technical solutions, preferably in a startup or fast-paced environment
- Demonstrated experience delivering initiatives for GRC, Security, Risk, Compliance, or adjacent functions (e.g., audit readiness, compliance programs, risk remediation, control or policy implementation)
- Strong understanding of governance, risk management, and compliance fundamentals, as well as core security concepts and their practical application
- Proven ability to lead cross-functional programs and drive accountability without direct authority
- Excellent written and verbal communication skills, with experience presenting status, risks, and tradeoffs to diverse audiences
- Hands-on experience using project management tools such as ServiceNow, Jira, Microsoft Project, Linear, or equivalent enterprise platforms
- Demonstrated ability to develop and maintain high-quality documentation and reporting, including project plans, dashboards, runbooks, and retrospectives
- Bachelor's degree in Computer Engineering, Information Technology, Business Administration, Information Security or a related field
- Capable of translating and communicating highly technical requirements in a way that focuses on customer or business impact
- Experience in collaborating with and meeting the needs of customers and teammates at a global corporation
- Experience working with SaaS products or software engineering teams, particularly in cybersecurity or cloud-native environments
- Familiarity with AI-driven workflows, automation tools, or data-informed delivery practices
- Certifications such as PMP, SAFe, CRISC, CISSP, CISA, or CISM
- Direct experience managing projects in Linear, or similar AI-native Project Management tools
- Experience with GRC platforms such as Drata or similar tooling
- Experience operating in regulated or public company environments and familiarity with common compliance frameworks (e.g., SOC 2, ISO)
- Experience working in a remote-first environment with globally distributed teams
#LI-EM5
At Abnormal AI, certain roles are eligible for a bonus, restricted stock units (RSUs), and benefits. Individual compensation packages are based on factors unique to each candidate, including their skills, experience, qualifications and other job-related reasons.
Abnormal AI is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by law. For our EEO policy statement please click here. If you would like more information on your EEO rights under the law, please click here.
Top Skills
What We Do
The Abnormal Security platform protects enterprises from targeted email attacks. Abnormal Behavior Technology (ABX) models the identity of both employees and external senders, profiles relationships and analyzes email content to stop attacks that lead to account takeover, financial damage and organizational mistrust. Though one-click, API-based Office 365 and G Suite integration, Abnormal sets up in minutes and does not disrupt email flow.
Abnormal Security was founded in 2018 by CEO Evan Reiser, CTO Sanjay Jeyakumar, Head of Machine Learning Jeshua Bratman, and Founding Engineers Abhijit Bagri and Dmitry Chechik. The team previously built behavioral profiling and machine learning technologies at Twitter, Google and Pinterest that are being applied to solve a problem that costs organizations $1 billion per year, according to the FBI. The Abnormal Security platform stops targeted phishing, business email compromise and account takeover attacks that have never been seen before.
