What You'll Be Leading
Lead and deliver multiple projects within a live NSIS / critical national infrastructure compliance programme, alongside a Programme Manager, fellow Project Managers and Business Analysts.
Own project plans, schedules and milestones end-to-end, keeping governance artefacts current in SharePoint and Microsoft Project.
Build and run the project governance framework, risk, controls and reporting, that gives assurance to programme leadership and, ultimately, regulators.
Translate complex security and compliance deliverables into milestones that operational and technical teams can actually deliver against.
Produce status, risk and progress reporting fit for senior and regulator-facing scrutiny.
Proactively manage cyber and delivery risk, surfacing issues and dependencies before they threaten the compliance deadline.
Work hands-on with operational, technical and security stakeholders who are more used to BAU than formal project delivery and bring them into a structured way of working.
What You'll Bring
A track record managing multiple concurrent projects inside a complex, security or risk-led programme.
Delivery experience in a regulated industry, where governance and audit trail matter as much as pace.
Confident stakeholder management, comfortable engaging and where needed challenging, senior stakeholders, including those from security and risk backgrounds.
A history of introducing project structure, governance and rigour where it didn't exist before.
Sharp planning and organisational skills, with real discipline around maintaining project controls and artefacts.
Experience producing reporting for an executive, ideally regulator-facing, audience.
Specialist Experience We'd Love to See
Direct exposure to the NIS Regulations, Operators of Essential Services (OES) obligations, or the NCSC's Cyber Assessment Framework (CAF).
Background delivering cybersecurity, information security or operational resilience programmes.
Experience in the energy or utilities sector.
Knowledge of physical security, site security controls or infrastructure protection projects.
Exposure to operational technology (OT) or IT/OT-converged environments.
Familiarity with related standards or frameworks such as ISO 27001 or NIST CSF.
Experience delivering projects involving data security, operational resilience or critical national infrastructure more broadly.