Cyber Project Manager

Osborne and Richardson; Sydney; On-site; AUD 120,000 - 150,000; Full time

Job summary

Osborne Richardson is seeking a Project Manager with strong cyber security experience to lead large-scale uplift and risk remediation programs within government or regulated environments.

You will manage scope, schedule, budget, RAID artifacts and executive reporting while coordinating cross‑functional teams and stakeholder engagement to deliver compliant outcomes.

The 12‑month Sydney contract starts 1 February 2027, with baseline security clearance required and extensions possible.

Qualifications

• Baseline security clearance is mandatory.
• Experience delivering large-scale cyber security uplift programs in government or regulated environments.
• Familiarity with PSPF, ISM, Essential 8, NIST and ASD guidance.

Responsibilities

• Lead delivery of cyber security uplift initiatives, remediation programs and risk reduction activities.
• Manage cross-functional delivery teams comprising cyber security, architecture, engineering, operations, testing and business resources.
• Oversee implementation of PSPF, ISM, Essential 8, NIST and ASD guidance.
• Manage project interdependencies across cyber security, infrastructure, identity, cloud, business continuity and operational resilience workstreams.
• Develop and maintain project governance artefacts, including RAID registers, schedules, status reports and executive briefs.
• Manage risks, issues and dependencies and ensure timely escalation.
• Support cyber security audits, accreditation activities and governance forums.
• Coordinate vendor, contractor and stakeholder engagement across multiple delivery streams.

Job description

Osborne Richardson are public sector recruitment specialists with over 30 years’ experience.

• 12 months (+extensions)
• $negotiable
• Sydney
• Start 1 Feb 2027
• Must have baseline security clearance

Role focus

The role requires strong experience delivering large-scale cyber security uplift, risk remediation, security compliance, technology transformation or cyber resilience programs within complex government or regulated environments. The Project Manager is responsible for managing scope, schedule, budget, risks, dependencies, stakeholders and reporting to ensure successful delivery of outcomes.

Responsibilities

• Lead delivery of cyber security uplift initiatives, remediation programs and risk reduction activities.
• Manage cross-functional delivery teams comprising cyber security, architecture, engineering, operations, testing and business resources.
• Oversee implementation of initiatives supporting PSPF, ISM, Essential Eight, Australian Signals Directorate recommendations and other government cyber security obligations.
• Manage project interdependencies across cyber security, infrastructure, identity, cloud, business continuity and operational resilience workstream.
• Develop and maintain project governance artefacts, including project plans, schedules, Risks, Assumptions, Issues and Dependencies (RAID) registers, status reports and executive briefs
• Manage project risks, issues and dependencies associated with cyber security initiatives and ensure timely escalation where required.
• Support cyber security audits, accreditation activities, assurance reviews and executive governance forums.
• Coordinate vendor, contractor and stakeholder engagement across multiple delivery streams. manage, deliver and monitor projects that may have an organisation-wide impact.

Experience

• Basline security clearance is mandatory
• Cyber security knowledge and experience
  • Protective Security Policy Framework (PSPF)
  • Information Security Manual (ISM)
  • Essential 8 Strategies
  • National Institute of Standards and Technology (NIST)
  • ASD Cyber Security Guidance
• Cyber security governance, risk and compliance processes.
• Financial management, procurement and contract management within government environments.
• Demonstrated experience delivering large-scale cyber security uplift programs, including initiatives associated with vulnerability management, security risk remediation, identity and access management, security operations, cloud security, business continuity, accreditation, compliance and cyber resilience outcomes.
• Demonstrated experience delivering cyber security uplift, cyber resilience, security risk remediation, technology transformation or regulatory compliance programs.

Thank you for your interest in this opportunity. We regret that, due to the volume of applications, we will not be able to repsond to all applicants.