Project Manager

resource23; Sydney; Hybrid; AUD 150,000 - 190,000; Full time

Job summary

Resource23 is seeking a Project Manager to lead large-scale cyber security uplift programs within government or regulated environments. You will manage scope, schedule, budget, risks, dependencies and governance across multiple workstreams and stakeholders.

The role requires strong delivery capability, familiarity with PSPF and ISM, and experience coordinating with vendors and executives. Hybrid working is available after an initial onsite period.

Qualifications

• Cyber security knowledge and experience.
• Familiar with Protective Security Policy Framework (PSPF).
• Experience with Information Security Manual (ISM).
• Knowledge of NIST and ASD Guidance.
• Experience with project and programme management methodologies (PRINCE2, MSP, Agile).
• Current Negative Vetting Level 1 (NV1) security clearance.

Responsibilities

• Lead delivery of cyber security uplift initiatives and risk reduction activities.
• Manage cross-functional delivery teams across cyber security, architecture, engineering, operations, testing and business resources.
• Oversee implementation of PSPF, ISM, Essential Eight and ASD guidelines.
• Coordinate vendor, contractor and stakeholder engagement across streams.
• Develop and maintain project governance artefacts including RAID registers and executive briefs.
• Ensure project deliverables meet scope, schedule and budget requirements.
• Support audits, accreditation activities and governance forums.
• Provide expert advice to stakeholders and executives.

Skills

Cyber security

PSPF

ISM

NIST

ASD Guidance

PRINCE2

MSP

Agile

Security clearance NV1

Stakeholder management

Tools

Microsoft Project

Azure DevOps

Jira

Job description

• Initial 12 month contract with option to extend for another 24 months
• Work from QLD, ACT, VIC, NSW or SA
• Work onsite for the first 6 weeks before a hybrid flexible working arrangement may be considered. Any hybrid flexible working arrangement will require a minimum of 3 days per week in the designated office location in the respective state.

Our federal client is seeking Project Managers who will manage the planning, execution and delivery of cyber security projects and work packages, ensuring alignment with government cyber security priorities, Agency strategic objectives, Protective Security Policy Framework (PSPF), Information Security Manual (ISM) and Essential Eight requirements.

The role requires strong experience delivering large-scale cyber security uplift, risk remediation, security compliance, technology transformation or cyber resilience programs within complex government or regulated environments. The Project Manager is responsible for managing scope, schedule, budget, risks, dependencies, stakeholders and reporting to ensure successful delivery of outcomes.

Key duties and responsibilities

• Lead delivery of cyber security uplift initiatives, remediation programs and risk reduction activities.
• Manage cross-functional delivery teams comprising cyber security, architecture, engineering, operations, testing and business resources.
• Oversee implementation of initiatives supporting PSPF, ISM, Essential Eight, Australian Signals Directorate recommendations and other government cyber security obligations.
• Manage project interdependencies across cyber security, infrastructure, identity, cloud, business continuity and operational resilience workstream.
• Develop and maintain project governance artefacts, including project plans, schedules, Risks, Assumptions, Issues and Dependencies (RAID) registers, status reports and executive briefs
• Manage project risks, issues and dependencies associated with cyber security initiatives and ensure timely escalation where required.
• Support cyber security audits, accreditation activities, assurance reviews and executive governance forums.
• Coordinate vendor, contractor and stakeholder engagement across multiple delivery streams.
• manage, deliver and monitor projects that may have an organisation-wide impact
• develop, manage and implement project plans and schedules in accordance with the agency’s project management framework and consider project interdependencies
• collaborate with staff in immediate work area and with internal and external stakeholders contribute to project design, governance arrangements and operational integration
• ensure project deliverables and milestones are met on time and within budget
• lead and manage staff and manage performance, attendance and health and wellbeing
• develop staff capability through coaching, mentoring and succession planning
• provide expert advice and feedback to stakeholders and the agency's executive
• research, review and evaluate projects in specific operational or technical areas
• report on project outputs to stakeholders, and oversee regular project reporting including status updates and exception reports
• prepare and review written material including business cases, plans, reports and executive briefs and corporate documentation
• undertake budget management, monitor expenditure and oversee procurement and contract management
• identify, assess, manage, escalate, report and monitor project risks, issues and benefits, including developing treatment strategies
• analyse project performance and coordinate quality management to ensure that project deliverables are fit for purpose and meet client needs
• support innovation, manage and lead change and significantly contribute to business improvement strategies
• develop and manage key stakeholder relationships and expectations to deliver projects
• represent the work area or agency at external and cross-agency forums, including conferences and meetings
• act with integrity by promoting workplace practices aligned with the APS Values and the APS Code of Conduct
• exercise delegations appropriate to role in accordance with legislation and guidelines

Knowledge / Qualifications

• Cyber security knowledge and experience
• Protective Security Policy Framework (PSPF)
• Information Security Manual (ISM)
• National Institute of Standards and Technology (NIST)
• ASD Cyber Security Guidance
• Project and programme management methodologies;
• PRINCE2
• Managing Successful Programmes (MSP)
• Agile
• Project Management Professional (PMP)
• Hybrid delivery approaches
• Cyber security governance, risk and compliance processes.
• Financial management, procurement and contract management within government environments.
• Demonstrated experience delivering large-scale cyber security uplift programs, including initiatives associated with vulnerability management, security risk remediation, identity and access management, security operations, cloud security, business continuity, accreditation, compliance and cyber resilience outcomes.
• Demonstrated experience delivering cyber security uplift, cyber resilience, security risk remediation, technology transformation or regulatory compliance programs.
• Experience delivering projects within large and complex government environments.
• Experience managing executive stakeholders, governance forums and assurance activities within cyber security programs.
• Experience managing third-party suppliers and complex ICT procurement activities.
• Measurement MEAS - Level 5
• Methods and tools METL - Level 4
• Quality management QUMG - Level 5
• Requirements definition and management REQM - Level 4

Technical skills

• Reporting and agile delivery management tools:
• Microsoft Project, Azure DevOps, Jira,Experience managing delivery across cloud, infrastructure, cyber security, identity and technology uplift programs.
• Demonstrated experience delivering cyber security uplift, cyber resilience, security remediation or compliance initiatives within large and complex ICT environments, preferably within Australian Government or other regulated environments.
• Demonstrated and proven experience performing the duties and responsibilities relevant to the role being applied for, including the required technical skills, technologies, frameworks and methodologies identified in the RFQ
• Demonstrated experience applying cyber security frameworks, policies and standards, including the Protective Security Policy Framework (PSPF), Information Security Manual (ISM), Essential Eight and other relevant security and risk management frameworks.
• Demonstrated ability to engage, influence and collaborate with a broad range of stakeholders, including senior executives, technical specialists, business representatives and external providers.
• Must hold and maintain a current Negative Vetting Level 1 (NV1) Security Clearance.
• Demonstrated experience delivering cyber security, infrastructure, ICT transformation or uplift activities within Services Australia or other Australian Government agencies.
• Demonstrated experience identifying, assessing and managing cyber security risks, vulnerabilities, compliance obligations and remediation activities.
• Experience working within large-scale enterprise environments involving cloud platforms, identity and access management, security operations, infrastructure, applications and data services.
• Demonstrated ability to deliver outcomes within tight timeframes while managing competing priorities, dependencies and stakeholder expectations.Demonstrated ability to communicate complex technical and cyber security concepts to both technical and non-technical audiences and contribute to capability uplift through mentoring, collaboration and knowledge transfer activities.