Profectus is seeking an experienced Cyber Program Manager to lead a cyber security uplift program for a client in Canberra. You will take the program from strategy and investment approval through to delivery across corporate IT and operational technology environments. The work covers program governance, multi year roadmap planning, business case development, vendor management and executive and Board reporting.

Key Responsibilities

- Lead the cyber security uplift program across IT and operational technology environments, from strategy through to delivery and closure

- Establish and run program governance, including steering committees, reporting cadence, RAID management and delivery assurance

- Plan and manage program scope, schedule, budget and resources across multiple concurrent workstreams

- Shape the enterprise cyber security strategy and assess current state against relevant security standards and regulatory obligations

- Produce a prioritised, costed, multi year uplift roadmap and turn it into a sequenced program of projects

- Write investment ready business cases covering options analysis, benefits, costs, risks and delivery approach

- Prepare program status reports, briefs and Board papers

- Manage vendors and delivery partners against agreed scope, quality and timeframes

- Run workshops with business, IT, operational technology, finance, privacy and legal stakeholders

- Oversee delivery of uplift initiatives covering Microsoft security, SOE uplift, MFA, identity and access management and network segmentation

Required Experience
- Experience as a Program Manager leading cyber security uplift, compliance or resilience programs end to end

- Experience setting up and running program governance, including steering committees,



RAID logs and perks tracking

- Managing multiple concurrent projects and vendors, including scheduling, budget, resourcing and risk

- Developing costed, multi year cyber roadmaps and business cases, including CapEx and OpEx modelling

- Working knowledge of at least two of ISO 27001, NIST CSF, Essential Eight, ISM and PSPF

- Strong business writing across business cases, status reports and Board papers

- Presenting to executive committees and Boards, including securing investment approvals

- Knowledge of the Microsoft security ecosystem, MFA, identity and access management and network security

- Exposure to operational technology security risk, including OT network segmentation

Desirable Experience
- Cyber consulting experience with one of the Big Four professional services firms, ideally at Manager, Senior Manager or Associate Director level

- Experience in critical infrastructure or energy sectors

- Familiarity with the Security of Critical Infrastructure Act and associated obligations

- Experience developing cyber risk methodologies, target operating models or cyber awareness programs

- A recognised program or project management certification such as PMP, MSP, PRINCE2 or P3O

Mandatory Requirements
- Must be an Australian Citizen

- Must be willing to work onsite in Canberra

Working Arrangements
- Onsite

- Canberra based (candidates must be located in Canberra or willing to relocate)

Why Profectus

Profectus partners with Australian Government agencies to deliver trusted ICT capability across complex delivery programs. We take a long term, relationship driven approach, supporting our people across the full lifecycle of their engagement while contributing to outcomes of national importance.

📌 Cyber Program Manager (Canberra)
🏢 Profectus
📍 Canberra