Scrum Master Information Security

Job Role: Scrum Master Information Security Agile

Location: Chicago, IL

Job Description:

Must Have Technical/Functional Skills

1. Strong understanding of Scrum, Kanban, and scaled Agile methodologies such as SAFe or LeSS.
2. Experience working in Cybersecurity or DevSecOps environments.
3. Familiarity with CI/CD tools such as Jenkins, GitLab CI/CD, or Azure DevOps.
4. Advanced proficiency with Agile project management tools such as Jira and Confluence.
5. Understanding secure SDLC, vulnerability management, threat modeling, security testing, and shift-left security practices.
6. Ability to create and maintain delivery dashboards, metrics, and documentation using Jira, Confluence, Tableau, or similar tools.
7. Log analysis and production issue troubleshooting

Roles & Responsibilities

1. Facilitate Agile ceremonies including sprint planning, daily stand-ups, sprint reviews, and retrospectives, ensuring they remain value-driven.
2. Coach and mentor teams on Agile principles, Scrum, Kanban, scaled frameworks, and continuous improvement practices.
3. Identify and proactively remove impediments while helping the team maintain sustainable delivery momentum.
4. Collaborate with security, DevOps, product owners, and business stakeholders to integrate secure development practices into the SDLC.
5. Promote shift-left security by supporting early identification and remediation of vulnerabilities through threat modeling, security testing, code reviews, and automation.
6. Support backlog prioritization and remediation planning for security vulnerabilities and related delivery items.
7. Provide clear visibility into delivery health, risks, dependencies, and opportunities through reporting dashboards and metrics.

Generic Managerial Skills, If any

1. Strong communication, facilitation, and stakeholder management skills.
2. Servant leadership mindset with ability to influence and drive outcomes without direct authority.
3. Problem-solving ability, adaptability, and comfort working in fast-paced cybersecurity delivery environments.
4. Ability to navigate ambiguity and support cross-functional collaboration across security, technology, and business teams.