Senior Program Manager - Cybersecurity

Assignment objective

Provide experienced cybersecurity-focused project delivery leadership for Cybersecurity initiatives within the Cybersecurity portfolio,

covering projects in discovery or delivery, new initiatives and selected run-and-maintain improvements.

The position will cover a major security program tor Group Terminals across the world. Study/Design phase is done. We’re looking

for a senior Program Manager to drive program execution along with a PM, a BA and several SMEs across Global and local IT’s.

Position is C-Level facing and operational reporting will me mandatory as pro active stakeholders management.

Scope of services

• Lead cybersecurity initiatives end to end, from intake and shaping through initiation, planning, delivery, security assurance,

deployment, transition to run, closure and benefits follow-up.

• Convert approved outcomes into an integrated delivery baseline covering scope, milestones, work packages, dependencies,

resources, cost, procurement, quality, assurance, communications and acceptance.

• Establish proportionate governance for projects, changes and run-and-maintain improvements, including clear accountabilities,

decision rights, stage gates, reporting cadence and escalation routes.

• Coordinate Group Cybersecurity teams, IT Teams, regional teams, business owners, architecture, engineering, operations,

privacy, legal, procurement, finance and suppliers across complex matrix organizational structures.

• Maintain high-quality RAID, decision, change, dependency, action and deliverables registers; ensure issues are evidence-based,

owners and due dates are explicit, and escalations are timely.

• Own schedule and critical-path management, resource forecasting and capacity discussions; identify bottlenecks and propose

viable sequencing or trade-off options.

• Manage budget, forecast, purchase and supplier controls within delegated authority; validate deliverables and service

acceptance evidence before recommending progressing or milestone approval.

• Integrate security assurance into the plan, including but not limited to : risk assessment, architecture review, control design,

security testing, vulnerability remediation, privacy review, audit evidence and residual-risk acceptance.

Key outputs

• Approved charter/PID and governance model

• Integrated plan, milestone roadmap and resource forecast

• Budget, forecast and procurement tracking

• RAID, decision, action and change-control registers

• Stakeholder, communication and governance calendar

• Supplier plan, deliverable acceptance and performance records

• Security assurance and stage-gate evidence plan

• Status reports and steering decision packs

• Deployment, cutover, rollback and hypercare plan

• Operational readiness and service transition pack

• Closure report, lessons learned and benefits follow-up

Required profile

• Proven senior-level project management experience delivering complex cyber or technology outcomes.

• Strong command of integrated planning, RAID, budget, governance, suppliers, steering reporting and transition to run.

• Ability to lead across business, technology, Group Cybersecurity, regions and external partners.

• Experience integrating security assurance, operational readiness and control evidence into delivery.

• Professional English & French.

• Relevant degree or equivalent experience. Recognised role certification is preferred.

• Broad awareness of NIST CSF, ISO 27001, CIS Controls, ITIL and secure delivery practices is desirable.

Relevant cybersecurity exposure

• Identity governance and administration, IAM, MFA and SSO.

• Privileged access management and Active Directory security

• Security operations, logging, SIEM, SOC integration and incident readiness

• Vulnerability, exposure and external attack-surface management

• Application, API, web and cloud security

• Infrastructure, endpoint, network, PKI and certificate management

• Data security, privacy, cryptography and information protection

• Cyber resilience, backup, recovery, crisis readiness and continuity

• OT/IoT and logistics-site security

• Third-party, supply-chain, M&A and regulatory cyber risk

• Security governance, control frameworks, audit and compliance

• Operationalisation, service management and continuous control improvement

1. Proven senior-level project management experience delivering complex cyber or technology outcomes
2. Strong command of integrated planning, RAID, budget, governance, suppliers, steering reporting and transition to run
3. Ability to lead across business, technology, Group Cybersecurity, regions and external partners
4. Experience integrating security assurance, operational readiness and control evidence into delivery
5. Professional English & French language skills
6. Relevant degree or equivalent experience; recognised role certification is preferred
7. Broad awareness of NIST CSF, ISO 27001, CIS Controls, ITIL and secure delivery practices is desirable
8. Relevant cybersecurity exposure including Identity governance and administration, IAM, MFA and SSO; Privileged access management and Active Directory security; Security operations, logging, SIEM, SOC integration and incident readiness; Vulnerability, exposure and external attack-surface management; Application, API, web and cloud security; Infrastructure, endpoint, network, PKI and certificate management; Data security, privacy, cryptography and information protection; Cyber resilience, backup, recovery, crisis readiness and continuity; OT/IoT and logistics-site security; Third-party, supply-chain, M&A and regulatory cyber risk; Security governance, control frameworks, audit and compliance; Operationalisation, service management and continuous control improvement