Profectus is seeking expressions of interest from experienced Cyber Security Program Managers. The work is likely to require managing delivery of a multi-year cyber security uplift program across IT and operational technology (OT) environments, including scope, schedule, budget, vendors, risks and reporting to executives and the Board.

Key Responsibilities

- Plan and manage delivery of a multi-year cyber security uplift program and its projects
- Manage program scope, schedule, budget, resources and dependencies
- Set up and run program governance, including steering committee papers, status reporting and decision logs
- Manage program risks, issues, assumptions and dependencies
- Coordinate delivery across IT, OT, architecture, operations and vendor teams
- Manage vendors and contractors, including statements of work and performance
- Track progress and benefits against the costed roadmap
- Prepare briefs, papers and reports for executive and Board audiences
- Run planning workshops and stakeholder sessions to agree priorities and land decisions
- Support business change so recent security controls are adopted and sustained

Required Experience

- Minimum seven years in project or program management, including delivery of cyber security uplift programs
- Managing program budgets, schedules,



resources and vendors
- Program governance and reporting to executive committees and Boards
- Working knowledge of cyber security controls such as MFA, identity and access management and network segmentation, enough to be credible with technical teams
- Familiarity with at least two of ISO 27001, NIST CSF and the Essential Eight
- Stakeholder engagement and workshop facilitation at all levels
- Business writing across briefs, reports and Board papers

Desirable Experience

- PMP, PRINCE2, MSP or AgilePM certification
- Delivering security projects in OT environments
- Critical infrastructure environments and the Security of Critical Infrastructure Act
- Consulting or advisory background, with a record of delivering the work rather than handing over a report
- Projects involving the Microsoft security ecosystem

Working Arrangements

- 100% onsite
- Canberra

Why Profectus

Profectus partners with Australian Government agencies to deliver trusted ICT capability across complex delivery programs. We take a long term, relationship driven approach, supporting our people across the full lifecycle of their engagement while contributing to outcomes of national importance.

📌 Cyber Security Program Manager (Canberra)
🏢 Profectus
📍 Canberra