Program Manager - Security

About the role

APA, Australia's energy infrastructure partner, is seeking an experienced Program Manager - Security to lead the coordination, governance and reporting of its security uplift program. The role supports compliance, resilience and security capability improvements across the business, working with Protective Security, Cyber Security, Enterprise Resilience, People & Culture and other stakeholder groups. It sits at the intersection of strategy, governance and delivery, partnering with senior leaders and diverse teams.

Key responsibilities

• Lead the coordination and governance of the security uplift program, aligning it with strategic priorities, risk objectives and regulatory requirements.
• Coordinate program activities across protective security, cyber security, workforce, resilience and third-party assurance initiatives.
• Develop and manage an integrated program roadmap, including milestones, dependencies, risks and key deliverables.
• Facilitate alignment across business functions on priorities, resources, dependencies and delivery outcomes.
• Establish governance, assurance and reporting frameworks that show program performance and readiness.
• Coordinate enterprise-wide assessments to identify capability gaps and improvement opportunities.
• Prepare executive papers, governance updates, business cases and investment recommendations.
• Manage program risks, issues, decisions and dependencies, escalating material matters promptly.
• Engage internal stakeholders, delivery partners, suppliers and third-party operators.
• Provide reporting and decision-support materials to senior leaders and governance forums.
• Track regulatory uplift obligations, implementation activities and evidence requirements for compliance reporting.

Required profile

• Strong program or portfolio management experience in a complex organisational environment.
• Collaborative and strategic program leader who can work across stakeholder groups and turn strategy into delivery plans.
• Ability to influence and engage senior stakeholders across diverse business functions.
• Eligible to work in Australia; the role involves critical data, systems or infrastructure and requires background vetting, including police checks.

Required skills

• Knowledge of relevant security legislation, including the Security of Critical Infrastructure (SoCI) Act.
• Experience establishing governance, reporting and assurance frameworks.
• Strong risk management, planning and problem-solving capabilities.
• Excellent communication skills, including executive reporting and presentation development.

What we offer

• Targeted career development programs.
• Competitive remuneration and employee benefits.
• Flexible working arrangements and wellbeing initiatives.
• Inclusive parental leave of 18 weeks, including superannuation.