Cyber Security Program Manager

Profectus is seeking expressions of interest from experienced Cyber Security Program Managers. The work is likely to require managing delivery of a multi-year cyber security uplift program across IT and operational technology (OT) environments, including scope, schedule, budget, vendors, risks and reporting to executives and the Board.

Key Responsibilities

• Plan and manage delivery of a multi-year cyber security uplift program and its projects
• Manage program scope, schedule, budget, resources and dependencies
• Set up and run program governance, including steering committee papers, status reporting and decision logs
• Manage program risks, issues, assumptions and dependencies
• Coordinate delivery across IT, OT, architecture, operations and vendor teams
• Manage vendors and contractors, including statements of work and performance
• Track progress and benefits against the costed roadmap
• Prepare briefs, papers and reports for executive and Board audiences
• Run planning workshops and stakeholder sessions to agree priorities and land decisions
• Support business change so new security controls are adopted and sustained

Required Experience

• Minimum seven years in project or program management, including delivery of cyber security uplift programs
• Managing program budgets, schedules, resources and vendors
• Program governance and reporting to executive committees and Boards
• Working knowledge of cyber security controls such as MFA, identity and access management and network segmentation, enough to be credible with technical teams
• Familiarity with at least two of ISO 27001, NIST CSF and the Essential Eight
• Stakeholder engagement and workshop facilitation at all levels
• Business writing across briefs, reports and Board papers

Desirable Experience

• PMP, PRINCE2, MSP or AgilePM certification
• Delivering security projects in OT environments
• Critical infrastructure environments and the Security of Critical Infrastructure Act
• Consulting or advisory background, with a record of delivering the work rather than handing over a report
• Projects involving the Microsoft security ecosystem

Working Arrangements

• 100% onsite
• Canberra

Why Profectus

Profectus partners with Australian Government agencies to deliver trusted ICT capability across complex delivery programs. We take a long term, relationship driven approach, supporting our people across the full lifecycle of their engagement while contributing to outcomes of national importance.