Senior Program Manager - Cybersecurity - Freelance

Assignment objective

Provide experienced cybersecurity-focused project delivery leadership for Cybersecurity initiatives within the Cybersecurity portfolio,

covering projects in discovery or delivery, new initiatives and selected run-and-maintain improvements.

The position will cover a major security program tor Group Terminals across the world. Study/Design phase is done. We’re looking

for a senior Program Manager to drive program execution along with a PM, a BA and several SMEs across Global and local IT’s.

Position is C-Level facing and operational reporting will me mandatory as pro active stakeholders management.

Scope of services

• Lead cybersecurity initiatives end to end, from intake and shaping through initiation, planning, delivery, security assurance,

deployment, transition to run, closure and benefits follow-up.

• Convert approved outcomes into an integrated delivery baseline covering scope, milestones, work packages, dependencies,

resources, cost, procurement, quality, assurance, communications and acceptance.

• Establish proportionate governance for projects, changes and run-and-maintain improvements, including clear accountabilities,

decision rights, stage gates, reporting cadence and escalation routes.

• Coordinate Group Cybersecurity teams, IT Teams, regional teams, business owners, architecture, engineering, operations,

privacy, legal, procurement, finance and suppliers across complex matrix organizational structures.

• Maintain high-quality RAID, decision, change, dependency, action and deliverables registers; ensure issues are evidence-based,

owners and due dates are explicit, and escalations are timely.

• Own schedule and critical-path management, resource forecasting and capacity discussions; identify bottlenecks and propose

viable sequencing or trade-off options.

• Manage budget, forecast, purchase and supplier controls within delegated authority; validate deliverables and service

acceptance evidence before recommending progressing or milestone approval.

• Integrate security assurance into the plan, including but not limited to : risk assessment, architecture review, control design,

security testing, vulnerability remediation, privacy review, audit evidence and residual-risk acceptance.

Key outputs

• Approved charter/PID and governance model

• Integrated plan, milestone roadmap and resource forecast

• Budget, forecast and procurement tracking

• RAID, decision, action and change-control registers

• Stakeholder, communication and governance calendar

• Supplier plan, deliverable acceptance and performance records

• Security assurance and stage-gate evidence plan

• Status reports and steering decision packs

• Deployment, cutover, rollback and hypercare plan

• Operational readiness and service transition pack

• Closure report, lessons learned and benefits follow-up

Required profile

• Proven senior-level project management experience delivering complex cyber or technology outcomes.

• Strong command of integrated planning, RAID, budget, governance, suppliers, steering reporting and transition to run.

• Ability to lead across business, technology, Group Cybersecurity, regions and external partners.

• Experience integrating security assurance, operational readiness and control evidence into delivery.

• Professional English & French.

• Relevant degree or equivalent experience. Recognised role certification is preferred.

• Broad awareness of NIST CSF, ISO 27001, CIS Controls, ITIL and secure delivery practices is desirable.

Relevant cybersecurity exposure

• Identity governance and administration, IAM, MFA and SSO.

• Privileged access management and Active Directory security

• Security operations, logging, SIEM, SOC integration and incident readiness

• Vulnerability, exposure and external attack-surface management

• Application, API, web and cloud security

• Infrastructure, endpoint, network, PKI and certificate management

• Data security, privacy, cryptography and information protection

• Cyber resilience, backup, recovery, crisis readiness and continuity

• OT/IoT and logistics-site security

• Third-party, supply-chain, M&A and regulatory cyber risk

• Security governance, control frameworks, audit and compliance

• Operationalisation, service management and continuous control improvement