OCRT is a sovereign, veteran-owned Australian consultancy delivering professional services across Defence, Government, and national security. We are putting together a team to support a critical infrastructure risk and security uplift opportunity for a major renewable energy transmission network in NSW, and are seeking an experienced Program/Engagement Manager to line up for delivery. The role: Embedded within the client's business in Sydney, you'll lead a phased engagement to establish and uplift a Critical Infrastructure Risk Management Program (CIRMP) under the Security of Critical Infrastructure Act 2018; spanning cyber, personnel, supply chain, and physical/natural hazard risk domains, through to board-ready compliance outcomes. What we're looking for:
• Proven experience leading complex, multi-stakeholder risk/compliance or security programs, ideally in critical infrastructure, energy, or utilities sectors
• Familiarity with the Security of Critical Infrastructure Act 2018 and CIRMP Rules (or equivalent regulatory/compliance frameworks)
- direct SOCI Act experience highly regarded
• Experience in greenfield infrastructure or renewable energy transmission projects
• Experience managing phased, deliverable-based engagements with formal client sign-off/acceptance gates




• Comfortable operating across OT/IT environments and engaging both technical specialists (cyber, engineering) and executive/board-level stakeholders
• Experience working across multi-party delivery models
- e.g. coordinating between an asset owner, a design/construct partner, and an operations/maintenance partner
• Robust governance, reporting, and documentation discipline
- including fortnightly status reporting, RAID/issues logs, and evidence-based compliance reporting
• Background across one or more of: cyber and information security, personnel security, supply chain risk, or physical security/natural hazard management
• Based in or willing to be embedded in Sydney for the engagement duration, with on-site presence as required
• Experience producing board-ready or executive-level reporting and briefings Nice to have:
• Prior exposure to the Australian Energy Sector Cyber Security Framework (AESCSF)
• Familiarity with critical infrastructure asset registers, material risk assessments, or design conformance reviews Why OCRT: We're a tight-knit, capability-led team that backs our people into meaningful national-security-adjacent work; with the autonomy of consulting and the support of a firm that knows this sector. ? Interested or want to know more? Apply with your CV or reach out to [email protected] directly.

📌 Program Manager – Critical Infrastructure Security Uplift (Sydney)
🏢 OCRT Consulting
📍 Sydney