Cyber Security Program Manager

Profectus; Canberra; On-site; AUD 140,000 - 180,000; Full time

Job summary

Profectus is seeking an experienced Cyber Security Program Manager to lead delivery of a multi-year uplift across IT and OT environments. The role involves managing scope, schedule, budget, vendors and reporting to executives and the Board.

You will coordinate with IT, OT, architecture, operations and vendors, run planning workshops, and ensure adoption of new security controls. 100% onsite in Canberra, Australia.

Qualifications

• Minimum seven years in project or program management, including cyber security uplift delivery.
• Experience managing budgets, schedules, resources and vendors for programs.
• Governance and reporting to executives and Boards.

Responsibilities

• Plan and manage delivery of a multi-year cyber security uplift program and its projects.
• Manage program scope, schedule, budget, resources and dependencies.
• Set up governance and prepare status reports and decision logs.
• Coordinate delivery across IT, OT, architecture, operations and vendors.
• Track progress and benefits against the roadmap and briefs for Board audiences.
• Support business change to adopt and sustain new security controls.

Skills

Program management

Stakeholder engagement

Workshop facilitation

Business writing

Education

PMP / PRINCE2 / MSP / AgilePM certifications (Desirable)

Tools

ISO 27001

NIST CSF

Essential Eight

Job description

Profectus is seeking expressions of interest from experienced Cyber Security Program Managers. The work is likely to require managing delivery of a multi-year cyber security uplift program across IT and operational technology (OT) environments, including scope, schedule, budget, vendors, risks and reporting to executives and the Board.

Key Responsibilities

• Plan and manage delivery of a multi-year cyber security uplift program and its projects
• Manage program scope, schedule, budget, resources and dependencies
• Set up and run program governance, including steering committee papers, status reporting and decision logs
• Manage program risks, issues, assumptions and dependencies
• Coordinate delivery across IT, OT, architecture, operations and vendor teams
• Manage vendors and contractors, including statements of work and performance
• Track progress and benefits against the costed roadmap
• Prepare briefs, papers and reports for executive and Board audiences
• Run planning workshops and stakeholder sessions to agree priorities and land decisions
• Support business change so new security controls are adopted and sustained

Required Experience

• Minimum seven years in project or program management, including delivery of cyber security uplift programs
• Managing program budgets, schedules, resources and vendors
• Program governance and reporting to executive committees and Boards
• Working knowledge of cyber security controls such as MFA, identity and access management and network segmentation, enough to be credible with technical teams
• Familiarity with at least two of ISO 27001, NIST CSF and the Essential Eight
• Stakeholder engagement and workshop facilitation at all levels
• Business writing across briefs, reports and Board papers

Desirable Experience

• PMP, PRINCE2, MSP or AgilePM certification
• Delivering security projects in OT environments
• Critical infrastructure environments and the Security of Critical Infrastructure Act
• Consulting or advisory background, with a record of delivering the work rather than handing over a report
• Projects involving the Microsoft security ecosystem

Working Arrangements

• 100% onsite
• Canberra

Why Profectus

Profectus partners with Australian Government agencies to deliver trusted ICT capability across complex delivery programs. We take a long term, relationship driven approach, supporting our people across the full lifecycle of their engagement while contributing to outcomes of national importance.