Cybersecurity Program Manager

Program leadership

• Own end-to-end delivery across four OT security program streams, ensuring alignment to the CISO’s strategy and priorities
• Lead, coach and hold accountable a team of project managers, with one PM per project reporting to you
• Identify struggling or at-risk projects early and lead recovery plans, resetting scope, governance, timelines and expectations where needed
• Build and maintain an integrated program plan, covering dependencies, risks, budget and resourcing across all streams

Assurance and challenge

• Independently validate project status and test whether reported progress reflects reality
• Challenge RAG reporting, assumptions and delivery claims with evidence, and escalate with the right arguments at the right time
• Establish robust governance, KPIs and reporting that give senior stakeholders a trusted view of delivery and risk

Financial and portfolio management

• Manage the c. £9m program budget, including forecasting, benefits tracking and investment justification
• Prioritise and sequence the portfolio to maximise risk reduction and value for money
• Support business case development and funding requests for next year’s expanded scope

Stakeholder engagement

• Act as the primary delivery voice to the Senior Director (CISO-1) and wider security leadership
• Build effective relationships with plant leadership, OT engineering, IT security, and regulatory and compliance teams across multiple regions
• Influence and negotiate across cultures and time zones, particularly with international sites

Security and compliance

• Ensure program delivery meets the security standards expected in a regulated QSE environment
• Embed security-by-design and relevant OT frameworks (e.g. IEC 62443, NIST CSF/800-82) into project delivery
• Work with compliance and risk teams to ensure regulatory obligations are understood and met

• Proven track record as a Program Manager in cybersecurity, with strong delivery credentials at program (not just project) level
• Hands-on exposure to OT / ICS security in manufacturing, industrial or similar environments; credible with both engineers and security leadership
• Experience managing a multi-project portfolio of comparable scale (multi-million pound budgets)
• Demonstrated success rescuing or restarting troubled projects or programs
• Strong understanding of security fundamentals; able to challenge technical and delivery claims with confidence
• Experience working in or alongside highly regulated environments
• Comfortable leading teams of project managers and holding them to account
• Excellent senior stakeholder management, including communication with Director-level and above
• Experience working with global, multi-site operations and distributed teams

Desirable

• Familiarity with IEC 62443, NIST SP 800-82, NIS2 or equivalent OT security standards
• Experience in manufacturing or production-plant environments
• Relevant certifications (PMP, PgMP, PRINCE2, SAFe, CISSP, CISM, GICSP or similar)
• Prior experience working in an Office of the CISO or security governance function, * Courageous and direct: speaks up on time, with the right arguments, and does not defer to avoid friction
• Resilient: thrives in a challenging team environment and stays composed under pressure
• Evidence-driven: trusts data and verification over status reports
• Ambitious and energetic: brings pace, ownership and a determination to deliver
• Credible: earns respect from both technical teams and senior leaders

We are looking for an experienced Cybersecurity Program Manager to lead a portfolio of OT security programs within the Office of the CISO. You will take ownership of four program streams comprising seven to eight active projects, with a clear mandate: stabilise what is struggling, rescue projects that have stalled, and bring the portfolio to life ahead of a significantly larger year of delivery. The portfolio carries approximately £9 million of investment, and ambition for the coming year is substantial. This is a high-visibility role in a highly regulated environment (QSE), where security rigour is non-negotiable and delivery credibility matters as much as technical understanding. Context

• 26 production plants globally, 12 of which fall within the OT scope
• OT sites located across China, Switzerland, the US and India
• Four program streams, seven to eight projects, c. £9m investment
• Operating in a heavily regulated QSE (Quality, Safety, Environment) space