Security Services Delivery Manager

About Us:

EhsanLab is a leading software testing and cybersecurity company delivering enterprise-grade solutions in quality assurance, performance testing, and advanced security services.
As part of our expansion into AI-driven automation and intelligent systems, we help organizations move beyond traditional operations and redesign how their businesses function through scalable, AI-powered solutions.
Our partners don’t come to us for experiments; they come to transform how their operations work.
We support startups, enterprises, and regulated organizations in building secure, reliable, and scalable digital systems.
Our security teams work closely with clients to deliver high-quality cybersecurity engagements while maintaining strong standards across technical delivery, project governance, and client experience.

About the Role

As a Security Services Delivery Manager at EhsanLab, you will lead the successful delivery of client cybersecurity engagements, with a core focus on GRC and penetration-testing services.

You will connect clients, security consultants, and internal stakeholders to ensure every engagement has clear scope, suitable resources, consistent quality, effective commercial management, and timely communication.

This client-facing role combines cybersecurity knowledge, project governance, people and resource management, commercial oversight, pre-sales support, and continuous service improvement.

Your work will directly influence client satisfaction, delivery quality, team performance, and the commercial success of our security engagements.

Key Responsibilities:

Engagement & Delivery Management

• Manage a portfolio of GRC, penetration-testing, and cybersecurity engagements from internal handover through delivery, reporting, and closure.
• Define and monitor project scope, objectives, deliverables, dependencies, acceptance criteria, budgets, and communication plans.
• Develop and maintain delivery plans, milestones, forecasts, risk registers, status reports, and decision logs.
• Identify delivery issues early and coordinate practical recovery or escalation plans.
• Coordinate changes to scope, schedule, budget, or delivery assumptions with technical and commercial stakeholders.

Team & Resource Management

• Coordinate security consultants and technical specialists based on engagement requirements, capabilities, and availability.
• Provide day-to-day leadership, direction, feedback, and support to assigned delivery team members.
• Support capacity planning and resource forecasting across the security-services portfolio.
• Encourage knowledge transfer and effective collaboration across delivery teams.

Client & Stakeholder Management

• Lead regular client meetings and communicate progress, risks, dependencies, commercial considerations, and required actions.
• Build strong relationships with technical, business, and executive stakeholders.
• Translate technical risks, compliance requirements, and delivery constraints into clear business communication.
• Ensure clients have the visibility required to make informed decisions.

Quality & Commercial Management

• Monitor engagement budgets, margins, resource utilization, and other agreed commercial performance indicators.
• Monitor delivery quality and ensure outputs pass appropriate internal review before client submission.
• Track milestones, margins, resource utilization, client feedback, rework, and unresolved risks.
• Conduct engagement retrospectives and turn lessons learned into improvements to templates, workflows, and delivery standards.

Pre-Sales & Growth Support

• Support client discovery, service scoping, proposal development, presentations, estimates, and delivery planning.
• Identify opportunities to provide additional value to existing clients.
• Collaborate with commercial and technical teams to progress qualified opportunities.
• Contribute to upselling and cross-selling activities where appropriate.

Required Qualifications:

• Relevant experience in cybersecurity services, GRC, penetration testing, technology consulting, project delivery, or a related field.
• Experience coordinating multiple client-facing technical engagements with competing deadlines and dependencies.
• Strong understanding of GRC principles, security controls, risk management, compliance assessments, audit processes, and evidence requirements.
• Working knowledge of penetration-testing engagements, including scoping, rules of engagement, delivery dependencies, quality review, and client reporting.
• Strong project and commercial-management capabilities, including planning, budgeting, forecasting, margin management, risk management, and change control.
• Experience managing, coordinating, or providing day-to-day leadership to technical delivery teams.
• Ability to contribute to hands-on security or GRC activities when required.
• Ability to communicate technical, compliance, commercial, and delivery matters to both technical and non-technical stakeholders.
• Experience working with security consultants, GRC specialists, project managers, sales teams, and client representatives.
• Confidence participating in client discovery, pre-sales, and service-expansion discussions. Strong written and spoken English.
• Sound judgment when handling confidential information and sensitive client matters.

Nice to Have:

• 5+ years of relevant cybersecurity, consulting, or technical-service delivery experience.
• Experience delivering GRC and penetration-testing services in consulting or managed-services environments.
• Familiarity with frameworks and standards such as ISO 27001, NIST CSF, PCI DSS, SAMA Cybersecurity Framework, or Central Bank of Egypt cybersecurity requirements.
• Project or service-management certification such as PMP, PRINCE2, ITIL, or Scrum.

What Makes This Role Unique

• Opportunity to lead real cybersecurity engagements across GRC and penetration testing.
• Exposure to clients across regulated industries and multiple markets.
• A role combining cybersecurity, delivery leadership, commercial management, and client engagement
• Direct interaction with security consultants, technical leaders, commercial teams, and client decision-makers.
• Fully remote working environment with client-site travel when required by the engagement.

How to Apply:

If you’re an experienced cybersecurity or technical-services professional who can own client engagements, lead delivery teams, and turn complex requirements into successful outcomes, we’d love to hear from you.

Please submit your resume using the application form below.
We value capability, ownership, and ambition, not just job titles or years of experience.

Deadline: Open until filled.