Cybersecurity Program Manager

About Malleum

Malleum is at the forefront of next‑generation cyber defense, partnering with marquee clients across government, defense, financial services, and critical infrastructure. We're experiencing exceptional growth as demand accelerates for trusted advisors capable of delivering at the intersection of national security, allied intelligence cooperation, and enterprise resilience. Our teams design, build, and operate cutting‑edge technologies and programs that protect the systems, data, and missions that matter most—from sovereign cyber initiatives to multi‑domain threat operations supporting allied security frameworks.

If you want your work to have measurable impact at a national and international scale, Malleum is where ambition meets mission.

We're seeking a Cybersecurity Program Manager to lead the planning, execution, and delivery of complex, high‑stakes cybersecurity programs for our most strategic clients. You'll orchestrate multidisciplinary teams across threat intelligence, security engineering, governance, and incident response—ensuring programs deliver on technical excellence, compliance obligations, and operational outcomes. This is a remote position, with travel to client sites – typically Ontario-based – as required.

This is a high‑visibility role for a leader who thrives in fast‑moving, security‑cleared environments and wants to shape programs that influence the trajectory of allied cyber defense.

• Establish and mature Malleum's Cybersecurity Program Management Office (PMO), defining its charter, governance model, and operating cadence
• Standardize program and project delivery methodologies across the cybersecurity practice, harmonizing waterfall, agile, and hybrid approaches to client needs
• Develop and roll out playbooks, templates, and standard operating procedures (SOPs) for intake, scoping, risk management, change control, status reporting, and closeout
• Define and track portfolio-level KPIs, OKRs, and health metrics to give leadership real-time visibility into delivery performance, margin, and client outcomes
• Implement consistent resource management, capacity planning, and forecasting practices across concurrent engagements
• Build a centralized knowledge repository and lessons‑learned program to accelerate ramp‑up and embed continuous improvement
• Mentor and coach project managers and delivery leads, establishing career pathways and competency frameworks within the PMO
• Drive tooling standardization (e.g., Connect Wise, Jira, MS Project, Smartsheet, Confluence, Power BI) to ensure interoperability and reporting consistency
• Partner with Finance, HR, and Sales Operations to align PMO processes with revenue recognition, staffing, and pipeline workflows
• Champion governance forums (steering committees, portfolio reviews, risk councils) that elevate decision‑making and stakeholder alignment
• Lead end‑to‑end delivery of large‑scale cybersecurity programs spanning architecture, operations, compliance, and transformation initiatives
• Serve as the primary point of accountability to executive stakeholders at marquee public‑sector and Fortune 500 clients
• Manage program scope, schedule, budget, risk, and quality across multi‑year engagements with national security implications
• Coordinate cross‑functional teams including security architects, red teamers, Dev Sec Ops  engineers, GRC specialists, and analysts
• Translate complex technical concepts into clear executive‑level briefings, roadmaps, and decision documents
• Ensure programs align with frameworks such as NIST CSF, ISO 27001, ITSG‑33, CMMC, and allied defense standards
• Drive continuous improvement in delivery methodology, KPIs, and client outcomes
• Support business development through scoping, proposals, and trusted‑advisor relationships

• Demonstrated experience standing up or maturing a PMO within a consulting, defense, or technology services environment
• Track record of designing and operationalizing delivery frameworks, governance structures, and process documentation at scale
• Familiarity with maturity models such as P3M3, CMMI‑SVC, or PMI's OPM3 for benchmarking PMO capability
• Cybersecurity certifications such as…