OCRT is a sovereign, veteran-owned Australian consultancy delivering professional services across Defence, Government, and national security. We are putting together a team to support

a critical infrastructure risk and security uplift opportunity

for a major renewable energy transmission network in NSW, and are seeking an experienced

Program/Engagement Manager

to line up for delivery. The role:

Embedded within the client's business in Sydney, you'll lead a phased engagement to establish and uplift a Critical Infrastructure Risk Management Program (CIRMP) under the Security of Critical Infrastructure Act 2018; spanning cyber, personnel, supply chain, and physical/natural hazard risk domains, through to board-ready compliance outcomes. What we're looking for:

Proven experience leading complex, multi-stakeholder risk/compliance or security programs, ideally in critical infrastructure, energy, or utilities sectors Familiarity with the Security of Critical Infrastructure Act 2018 and CIRMP Rules (or equivalent regulatory/compliance frameworks) - direct SOCI Act experience highly regarded Experience in greenfield infrastructure or renewable energy transmission projects Experience managing phased,



deliverable-based engagements with formal client sign-off/acceptance gates Comfortable operating across OT/IT environments and engaging both technical specialists (cyber, engineering) and executive/board-level stakeholders Experience working across multi-party delivery models - e.g. coordinating between an asset owner, a design/construct partner, and an operations/maintenance partner Strong governance, reporting, and documentation discipline - including fortnightly status reporting, RAID/issues logs, and evidence-based compliance reporting Background across one or more of: cyber and information security, personnel security, supply chain risk, or physical security/natural hazard management Based in or willing to be embedded in Sydney for the engagement duration, with in office presence as required Experience producing board-ready or executive-level reporting and briefings Nice to have:

Prior exposure to the Australian Energy Sector Cyber Security Framework (AESCSF) Familiarity with critical infrastructure asset registers, material risk assessments, or design conformance reviews Why OCRT:

We're a tight-knit, capability-led team that backs our people into meaningful national-security-adjacent work; with the autonomy of consulting and the support of a firm that knows this sector.

📌 Program Manager (Sydney)
🏢 OCRT Consulting
📍 Sydney