IT/OT Cyber Security Project Manager

IT/OT Cyber Security Project Manager
Brisbane, QLD
Contract: 12 months
 
Position Overview
We are seeking an experienced IT/OT Cyber Security Project Manager to lead the delivery of complex cyber security initiatives across both Information Technology (IT) and Operational Technology (OT) environments.
 
Working within a critical infrastructure and energy environment, you will be responsible for managing the end to end delivery of cyber security projects that strengthen organisational resilience, improve security maturity, and support compliance with industry and regulatory obligations. This role requires a strong understanding of the unique challenges associated with securing operational environments while maintaining safety, reliability and availability of critical services.
 
The successful candidate will work closely with cyber security teams, operational stakeholders, engineering groups, technology vendors and executive leaders to deliver projects on time, within budget and aligned to business objectives.
 
Key Responsibilities
Project Delivery

• Lead the planning, governance and delivery of cyber security projects across IT and OT environments
• Manage project scope, schedules, budgets, resources, risks, dependencies and reporting
• Develop and maintain project management plans, RAID registers, status reports and executive updates
• Coordinate multiple workstreams and vendors to ensure successful delivery outcomes
• Drive project governance through Steering Committees, Working Groups and executive forums

 
Cyber Security Initiatives
Projects may include:

• Identity and Access Management (IAM)
• Privileged Access Management (PAM)
• Multi Factor Authentication (MFA)
• Operational Technology security uplift
• Network segmentation and Purdue Model implementation
• Security monitoring and SIEM enhancements
• Vulnerability management and remediation programs
• Security Operations Centre (SOC) improvements
• Microsoft security technologies
• Incident response and cyber resilience initiatives
• Regulatory and compliance driven cyber programs

 
Stakeholder Management

• Engage with operational, engineering and technology stakeholders across the organisation
• Build strong relationships with executive leadership, project sponsors and business representatives
• Facilitate workshops, project meetings and decision making forums
• Manage third party vendors and delivery partners

 
Risk and Compliance

• Ensure projects align with cyber security frameworks, policies and standards
• Support compliance with regulatory obligations and industry cyber security requirements
• Identify, assess and manage project and operational risks
• Coordinate assurance activities, audits and security reviews

 
Skills and Experience
Essential

• Demonstrated experience delivering cyber security projects within large and complex organisations
• Experience managing projects across both IT and Operational Technology environments
• Strong knowledge of project management methodologies including Agile, Waterfall and Hybrid delivery
• Experience managing vendors, system integrators and managed service providers
• Strong stakeholder engagement and executive communication skills
• Experience managing project financials, reporting and governance

 
Highly Desirable

• Experience within energy, utilities, mining, resources, oil and gas or other critical infrastructure sectors
• Understanding of Operational Technology environments including SCADA, EMS, DCS, PLC and industrial networks
• Knowledge of the Purdue Enterprise Reference Architecture Model
• Experience delivering projects aligned to AESCSF, NIST, ISO 27001, Essential Eight or IEC 62443
• Exposure to Microsoft security technologies, CyberArk, SailPoint, Okta, Entra ID or similar platforms

 
Qualifications

• Relevant degree in Information Technology, Cyber Security, Engineering or related discipline
• Project Management certification such as PRINCE2, PMP or equivalent
• Cyber Security certifications highly regarded
• Success Measures
• Successful delivery of cyber security initiatives to agreed scope, schedule and budget
• Achievement of cyber security maturity and risk reduction objectives
• Effective stakeholder engagement across business, technology and operational teams
• Improved resilience and protection of critical operational assets and infrastructure
• Strong governance, reporting and project controls throughout delivery