Sonatype is the software supply chain security company. We provide the world’s best end-to-end software supply chain security solution, combining the only proactive protection against malicious open source, the only enterprise-grade SBOM management, and the leading open source dependency management platform. This empowers enterprises to create and maintain secure, quality, and innovative software at scale.
As founders of Nexus Repository and stewards of Maven Central, the world’s largest repository of Java open-source software, we are software pioneers, and our open-source expertise is unmatched. We empower innovation with an unparalleled commitment to build faster, safer software and harness AI and data intelligence to mitigate risk, maximize efficiencies, and drive powerful software development.
More than 2,000 organizations, including 70% of the Fortune 100 and 15 million software developers, rely on Sonatype to optimize their software supply chains.
As a Technical Project Manager at Sonatype, you will drive the planning, execution, and delivery of critical security and IT initiatives. You will work cross-functionally with Application Security, Engineering, Product, Security Research, Legal, HR, Finance, and leadership teams to turn complex technical requirements into actionable project plans. You will ensure projects are delivered on time, within scope, and aligned with business objectives while maintaining clear communication across all stakeholders.
You will lead end-to-end project delivery for security and IT initiatives, transforming business needs into executable plans and ensuring successful outcomes through structured project management practices.
What You Will do
Project Execution & Ownership: Own assigned projects from planning through completion. Build and maintain detailed project plans across multiple concurrent, technology initiatives, ensuring milestones, owners, dependencies, risks, and deliverables remain on track.
Risk & Dependency Management: Proactively identify, track, and mitigate project risks and cross-team dependencies. Establish clear owners, mitigation plans, and escalation paths to prevent delivery delays.
Cross-Functional Alignment: Coordinate across multiple segments and teams—including IT, Security, Engineering, Finance, HR, Sales, Marketing and Legal—to align deliverables and resolve cross-segment dependencies.
Project Health & Reporting: Maintain clear visibility into project milestones, status, risks, dependencies, decisions, and changes to scope or timelines. Provide concise and actionable updates to key stakeholders.
Obstacle Removal & Stakeholder Touchpoints: Host regular syncs, manage ongoing communications, and proactively step in to clear blockers for the teams.
Decision & Escalation Management: Drive timely resolution of cross-functional decisions by identifying decision owners, documenting outcomes, and escalating unresolved issues when necessary.
Process Automation & Efficiency: Leverage AI and automation tools to streamline workflows, eliminate manual administrative overhead, and optimize operational efficiency.
Vendor and Tool Coordination: Coordinate vendor relationships, including procurement steps, renewals, and contract management
What You Bring
Experience: 5+ years of experience in technical Project Management within SaaS or technology companies.
Complex Deliverables: Proven track record of managing complex, cross-functional tech and data projects with multiple dependencies
Technical Fluency: Comfortable working with Security, IT, and Business teams and understanding technical concepts such as APIs, integrations, data flows, architecture dependencies, and software delivery processes at a project-management level.
Planning Through Ambiguity: Demonstrated ability to take ambiguous or loosely defined initiatives and turn them into structured execution plans with clear milestones, owners, dependencies, risks, and measurable outcomes.
Communication & Collaboration : Ability to synthesize complex project information into concise, actionable updates for senior leadership, including clearly communicating risks, tradeoffs, and decisions needed.
AI & Automation Mindset: Active user of AI tools and automation strategies to optimize day-to-day project workflows.
Project Management Tools: Experience using modern project and collaboration tools such as Jira, Confluence, Slack, and Google Workspace or equivalent platforms.
Location: Must be comfortable working effectively in a distributed, remote environment.
Certifications (Bonus): PMP certification is desired, but not mandatory.
Nice-to-Have Skills
Project Management Professional (PMP) or Agile certifications (CSM, SAFe)
Experience with security frameworks and compliance standards (SOC 2, ISO 27001, ISO 42001, NIST, GDPR)
Any background with IT and cybersecurity initiatives
Experience with identity and access management (IAM), SSO, MFA implementations
Familiarity with cloud platforms (AWS, Azure, GCP) and security tooling
Experience with ITSM frameworks and service management practices
Background in vendor management and procurement processes
Experience facilitating audits and compliance evidence collection.
