Profectus is seeking expressions of interest from experienced Cyber Security Program Managers. The work is likely to require managing delivery of a multi-year cyber security uplift program across IT and operational technology (OT) environments, including scope, schedule, budget, vendors, risks and reporting to executives and the Board.

Key Responsibilities

Plan and manage delivery of a multi-year cyber security uplift program and its projects

Manage program scope, schedule, budget, resources and dependencies

Set up and run program governance, including steering committee papers, status reporting and decision logs

Manage program risks, issues, assumptions and dependencies

Coordinate delivery across IT, OT, architecture, operations and vendor teams

Manage vendors and contractors, including statements of work and performance

Track progress and advantages against the costed roadmap

Prepare briefs, papers and reports for executive and Board audiences

Run planning workshops and stakeholder sessions to agree priorities and land decisions

Support business change so new security controls are adopted and sustained

Required Experience

Minimum seven years in project or program management, including delivery of cyber security uplift programs

Managing program budgets, schedules,



resources and vendors

Program governance and reporting to executive committees and Boards

Working knowledge of cyber security controls such as MFA, identity and access management and network segmentation, enough to be credible with technical teams

Familiarity with at least two of ISO 27001, NIST CSF and the Essential Eight

Stakeholder engagement and workshop facilitation at all levels

Business writing across briefs, reports and Board papers

Desirable Experience

PMP, PRINCE2, MSP or AgilePM certification

Delivering security projects in OT environments

Critical infrastructure environments and the Security of Critical Infrastructure Act

Consulting or advisory background, with a record of delivering the work rather than handing over a report

Projects involving the Microsoft security ecosystem

Working Arrangements

100% onsite

Canberra

Why Profectus Profectus partners with Australian Government agencies to deliver trusted ICT capability across complex delivery programs. We take a long term, relationship driven approach, supporting our people across the full lifecycle of their engagement while contributing to outcomes of national importance.

📌 Cyber Security Program Manager (Canberra)
🏢 Profectus
📍 Canberra