Cyber Security Programme Manager

Introduction

Lead a large-scale, multi-year Information Security Capability Maturation Programme, coordinating interdependent projects and workstreams from mobilisation through deployment and formal acceptance. Drive security capability improvement, manage programme investment and delivery risk, and ensure outcomes align with business priorities and the organisation’s security strategy.

Duties & Responsibilities

• Define and maintain the programme roadmap, delivery plans, milestones, dependencies and acceptance criteria across security projects and workstreams.

• Own programme-level governance, risk and issue management, dependency management, budget oversight, forecasting and stakeholder communications.

• Report progress, investment outlook, delivery risks and decisions required to senior executive sponsors; coordinate security, technology, risk, compliance and business stakeholders.

• Lead delivery of API Security, DNS Security, Exposure Management and Passwordless Authentication capabilities.

• Coordinate the forward security roadmap across agentic AI security, Extended Detection and Response (XDR), Identity and Access Management (IAM), data protection, database activity monitoring, control certification and insider threat management.

• Oversee mobilisation, implementation, production readiness, operational handover and formal acceptance, ensuring delivery meets applicable governance and regulatory requirements.

• Apply Agile, Waterfall and hybrid delivery approaches appropriate to cloud, software development, AI and quality assurance workstreams.

• Drive the assessment and responsible adoption of advanced AI-enabled defensive security capabilities to strengthen security operations and threat defence.

Desired Experience & Qualification

• Demonstrated experience leading complex, enterprise-wide information security programmes with multiple interdependent projects and significant budgets.

• Proven delivery experience from programme mobilisation through production deployment, operational handover and acceptance in a regulated environment.

• Strong knowledge of programme governance, financial management, forecasting, risk management and executive reporting.

• Experience delivering security capabilities such as Privileged Access Management (PAM), Endpoint Detection and Response (EDR), Cloud Access Security Broker (CASB), Secure Access Service Edge (SASE), Multi-Factor Authentication (MFA), Vulnerability Management, Static Application Security Testing (SAST) and Managed Detection and Response (MDR).

• Ability to coordinate cloud, software development, AI and quality assurance workstreams using Agile, Waterfall and hybrid delivery methods.

• Understanding of emerging AI-enabled security capabilities and the governance considerations associated with their adoption.

Core competencies

• Strategic programme planning and execution.

• Executive stakeholder engagement and clear communication.

• Financial oversight and delivery accountability.

• Cross-functional leadership, collaboration and dependency resolution.

• Risk-based decision-making and problem-solving.

• Business alignment, change adoption and operational readiness.

Kindly regard your application as unsuccessful if you have not heard from the agency within 2 weeks.