Cybersecurity Program Manager

Malleum

1d•Remote

About The Position

About Malleum Malleum is at the forefront of next-generation cyber defense, partnering with marquee clients across government, defense, financial services, and critical infrastructure. We're experiencing exceptional growth as demand accelerates for trusted advisors capable of delivering at the intersection of national security, allied intelligence cooperation, and enterprise resilience. Our teams design, build, and operate cutting-edge technologies and programs that protect the systems, data, and missions that matter most — from sovereign cyber initiatives to multi-domain threat operations supporting allied security frameworks. If you want your work to have measurable impact at a national and international scale, Malleum is where ambition meets mission. The Opportunity We're seeking a Cybersecurity Program Manager to lead the planning, execution, and delivery of complex, high-stakes cybersecurity programs for our most strategic clients. You'll orchestrate multidisciplinary teams across threat intelligence, security engineering, governance, and incident response — ensuring programs deliver on technical excellence, compliance obligations, and operational outcomes. This is a remote position, with travel to client sites – typically Ontario-based – as required. This is a high-visibility role for a leader who thrives in fast-moving, security-cleared environments and wants to shape programs that influence the trajectory of allied cyber defense.

Requirements

Demonstrated experience standing up or maturing a PMO within a consulting, defense, or technology services environment
Track record of designing and operationalizing delivery frameworks, governance structures, and process documentation at scale
Familiarity with maturity models such as P3M3, CMMI-SVC, or PMI's OPM3 for benchmarking PMO capability
Cybersecurity certifications such as CISSP, CISM, or GSLC strongly preferred
8+ years of progressive experience managing cybersecurity programs or large technical delivery portfolios
Demonstrated success leading programs in defense, intelligence, federal/government, or critical infrastructure environments
Deep working knowledge of cybersecurity domains: SecOps, cloud security, identity, OT/ICS, threat intelligence, or incident response
Excellent stakeholder management, written communication, and executive presence
Eligibility for Government of Canada security clearance (Secret or higher); existing clearance highly valued
Bilingualism (English/French) considered a strong asset

Responsibilities

Establish and mature Malleum's Cybersecurity Program Management Office (PMO), defining its charter, governance model, and operating cadence
Standardize program and project delivery methodologies across the cybersecurity practice, harmonizing waterfall, agile, and hybrid approaches to client needs
Develop and roll out playbooks, templates, and standard operating procedures (SOPs) for intake, scoping, risk management, change control, status reporting, and closeout
Define and track portfolio-level KPIs, OKRs, and health metrics to give leadership real-time visibility into delivery performance, margin, and client outcomes
Implement consistent resource management, capacity planning, and forecasting practices across concurrent engagements
Build a centralized knowledge repository and lessons-learned program to accelerate ramp-up and embed continuous improvement
Mentor and coach project managers and delivery leads, establishing career pathways and competency frameworks within the PMO
Drive tooling standardization (e.g., ConnectWise, Jira, MS Project, Smartsheet, Confluence, Power BI) to ensure interoperability and reporting consistency
Partner with Finance, HR, and Sales Operations to align PMO processes with revenue recognition, staffing, and pipeline workflows
Champion governance forums (steering committees, portfolio reviews, risk councils) that elevate decision-making and stakeholder alignment
Lead end-to-end delivery of large-scale cybersecurity programs spanning architecture, operations, compliance, and transformation initiatives
Serve as the primary point of accountability to executive stakeholders at marquee public-sector and Fortune 500 clients
Manage program scope, schedule, budget, risk, and quality across multi-year engagements with national security implications
Coordinate cross-functional teams including security architects, red teamers, DevSecOps engineers, GRC specialists, and analysts
Translate complex technical concepts into clear executive-level briefings, roadmaps, and decision documents
Ensure programs align with frameworks such as NIST CSF, ISO 27001, ITSG-33, CMMC, and allied defense standards
Drive continuous improvement in delivery methodology, KPIs, and client outcomes
Support business development through scoping, proposals, and trusted-advisor relationships