Project Manager – EL1 equivalent

Project Managers plan and manage the delivery of projects.

Project Managers are responsible for leading the delivery of complex cyber security and ICT initiatives that support the Agency’s Cyber Uplift Program and broader cyber resilience objectives.

Working under broad direction, Project Managers will manage the planning, execution and delivery of cyber security projects and work packages, ensuring alignment with government cyber security priorities, Agency strategic objectives, Protective Security Policy Framework (PSPF), Information Security Manual (ISM) and Essential Eight requirements.

The role requires strong experience delivering large-scale cyber security uplift, risk remediation, security compliance, technology transformation or cyber resilience programs within complex government or regulated environments. The Project Manager is responsible for managing scope, schedule, budget, risks, dependencies, stakeholders and reporting to ensure successful delivery of outcomes.

Key duties and responsibilities

• Lead delivery of cyber security uplift initiatives, remediation programs and risk reduction activities.
•  Manage cross-functional delivery teams comprising cyber security, architecture, engineering, operations, testing and business resources.
• Oversee implementation of initiatives supporting PSPF, ISM, Essential Eight, Australian Signals Directorate recommendations and other government cyber security obligations.
• Manage project interdependencies across cyber security, infrastructure, identity, cloud, business continuity and operational resilience workstream.
• Develop and maintain project governance artefacts, including project plans, schedules, Risks, Assumptions, Issues and Dependencies (RAID) registers, status reports and executive briefs
• Manage project risks, issues and dependencies associated with cyber security initiatives and ensure timely escalation where required.
• Support cyber security audits, accreditation activities, assurance reviews and executive governance forums.
• Coordinate vendor, contractor and stakeholder engagement across multiple delivery streams. • manage, deliver and monitor projects that may have an organisation-wide impact.
• manage, deliver and monitor projects that may have an organisation-wide impact
• develop, manage and implement project plans and schedules in accordance with the agency’s project management framework and consider project interdependencies
• collaborate with staff in immediate work area and with internal and external stakeholders • contribute to project design, governance arrangements and operational integration
• ensure project deliverables and milestones are met on time and within budget
• coordinate strategic planning for longer term project initiatives
• lead and manage staff and manage performance, attendance and health and wellbeing
• develop staff capability through coaching, mentoring and succession planning 
•  provide expert advice and feedback to stakeholders and the agency’s executive
• research, review and evaluate projects in specific operational or technical areas
• report on project outputs to stakeholders, and oversee regular project reporting including status updates and exception reports
• prepare and review written material including business cases, plans, reports and executive briefs and corporate documentation
• undertake budget management, monitor expenditure and oversee procurement and contract management
• identify, assess, manage, escalate, report and monitor project risks, issues and benefits, including developing treatment strategies 
• analyse project performance and coordinate quality management to ensure that project deliverables are fit for purpose and meet client needs
• support innovation, manage and lead change and significantly contribute to business improvement strategies
• develop and manage key stakeholder relationships and expectations to deliver projects
• represent the work area or agency at external and cross-agency forums, including conferences and meetings
• act with integrity by promoting workplace practices aligned with the APS Values and the APS Code of Conduct
• exercise delegations appropriate to role in accordance with legislation and guidelines 

Knowledge / Qualifications

• Cyber security knowledge and experience
  • Protective Security Policy Framework (PSPF)
  • Information Security Manual (ISM)
  •  Essential 8 Strategies
  •  National Institute of Standards and Technology (NIST)
  •  ASD Cyber Security Guidance
• Project and programme management methodologies;
  • PRINCE2
  • Managing Successful Programmes (MSP)
  • Agile
  • Project Management Professional (PMP)
  • Hybrid delivery approaches
• Cyber security governance, risk and compliance processes. 
• Financial management, procurement and contract management within government environments.
• Demonstrated experience delivering large-scale cyber security uplift programs, including initiatives associated with vulnerability management, security risk remediation, identity and access management, security operations, cloud security, business continuity, accreditation, compliance and cyber resilience outcomes.
• Demonstrated experience delivering cyber security uplift, cyber resilience, security risk remediation, technology transformation or regulatory compliance programs.
• Experience delivering projects within large and complex government environments.
• Experience managing executive stakeholders, governance forums and assurance activities within cyber security programs.
• Experience managing third-party suppliers and complex ICT procurement activities.
• Organisational change management CIPM – Level 5
• Measurement MEAS – Level 5
• Methods and tools METL – Level 4
• Project management PRMG – Level 5
• Quality management QUMG – Level 5
• Requirements definition and management REQM – Level 4

Essential criteria

1.Demonstrated experience delivering cyber security uplift, cyber resilience, security remediation or compliance initiatives within large and complex ICT environments, preferably within Australian Government or other regulated environments.

2.Demonstrated and proven experience performing the duties and responsibilities relevant to the role being applied for, including the required technical skills, technologies, frameworks and methodologies identified in the RFQ

3.Demonstrated experience applying cyber security frameworks, policies and standards, including the Protective Security Policy Framework (PSPF), Information Security Manual (ISM), Essential Eight and other relevant security and risk management frameworks.

4.Demonstrated ability to engage, influence and collaborate with a broad range of stakeholders, including senior executives, technical specialists, business representatives and external providers.

5.Must hold and maintain a current Negative Vetting Level 1 (NV1) Security Clearance.

Required criteria

1.Demonstrated experience delivering cyber security, infrastructure, ICT transformation or uplift activities within Services Australia or other Australian Government agencies.

2.Demonstrated experience identifying, assessing and managing cyber security risks, vulnerabilities, compliance obligations and remediation activities.

3.Experience working within large-scale enterprise environments involving cloud platforms, identity and access management, security operations, infrastructure, applications and data services.

4.Demonstrated ability to deliver outcomes within tight timeframes while managing competing priorities, dependencies and stakeholder expectations.Demonstrated ability to communicate complex technical and cyber security concepts to both technical and non-technical audiences and contribute to capability uplift through mentoring, collaboration and knowledge transfer activities.

The Labour Hire Worker is expected to work onsite for the first 6 weeks before a hybrid flexible working arrangement may be considered. Any hybrid flexible working arrangement will require the Labour Hire Worker to work a minimum of 3 days per week in the designated office location and will also be on the provision that the Labour Hire Worker’s residing address is within reasonable travel time and distance of the RFQ location. The location is the capital city of selected state/s.