Profectus is seeking an experienced Cyber Program Manager to lead a cyber security uplift program for a client in Canberra. You will take the program from strategy and investment approval through to delivery across corporate IT and operational technology environments. The work covers program governance, multi year roadmap planning, business case development, vendor management and executive and Board reporting.

The successful candidate must be able to perform the duties from Canberra.

Key Responsibilities

Lead the cyber security uplift program across IT and operational technology environments, from strategy through to delivery and closure

Establish and run program governance, including steering committees, reporting cadence, RAID management and delivery assurance

Plan and manage program scope, schedule, budget and resources across multiple concurrent workstreams

Shape the enterprise cyber security strategy and assess current state against relevant security standards and regulatory obligations

Produce a prioritised, costed, multi year uplift roadmap and turn it into a sequenced program of projects

Write investment ready business cases covering options analysis, benefits, costs, risks and delivery approach

Prepare program status reports, briefs and Board papers

Manage vendors and delivery partners against agreed scope, quality and timeframes

Run workshops with business, IT, operational technology, finance, privacy and legal stakeholders

Oversee delivery of uplift initiatives covering Microsoft security, SOE uplift, MFA, identity and access management and network segmentation

Required Experience

Experience as a Program Manager leading cyber security uplift, compliance or resilience programs end to end





Experience setting up and running program governance, including steering committees, RAID logs and advantages tracking

Managing multiple concurrent projects and vendors, including scheduling, budget, resourcing and risk

Developing costed, multi year cyber roadmaps and business cases, including CapEx and OpEx modelling

Working knowledge of at least two of ISO 27001, NIST CSF, Essential Eight, ISM and PSPF

Strong business writing across business cases, status reports and Board papers

Presenting to executive committees and Boards, including securing investment approvals

Knowledge of the Microsoft security ecosystem, MFA, identity and access management and network security

Exposure to operational technology security risk, including OT network segmentation

Cyber consulting experience with one of the Big Four professional services firms, ideally at Manager, Senior Manager or Associate Director level

Experience in critical infrastructure or energy sectors

Familiarity with the Security of Critical Infrastructure Act and associated obligations

Experience developing cyber risk methodologies, target operating models or cyber awareness programs

A recognised program or project management certification such as PMP, MSP, PRINCE2 or P3O

Working Arrangements

Onsite

Canberra based (candidates must be located in Canberra or willing to relocate)

Why Profectus Profectus partners with Australian Government agencies to deliver trusted ICT capability across complex delivery programs. We take a long term, relationship driven approach, supporting our people across the full lifecycle of their engagement while contributing to outcomes of national importance.

#J-18808-Ljbffr

📌 Cyber Program Manager (Yarralumla)
🏢 Profectus
📍 Yarralumla