Senior IT Project Manager X2

On behalf of our oil & gas client, Vaquarii is seeking Two Senior IT Project Managers for an initial 3-Month Contract with a high possibility of extension through to the end of 2027.

The first perfect candidate will have owned cybersecurity or penetration testing project delivery directly, not just supported it, and ideally brings GRC advisory experience alongside it.

The second perfect candidate is someone whose strength is OCM or communications-led delivery, still with baseline security-adjacent project exposure.

Services would be carried out though a Hybrid Work Schedule from their downtown Calgary headquarters.

Responsibilities:

• Runs delivery on cybersecurity and information-security initiatives inside the client’s Enterprise Security group, a unit that combines physical security and cybersecurity functions.
• Work is cybersecurity-focused day to day, with periodic coordination touchpoints into physical security counterparts on initiatives that span both.
• Owns a portfolio of individual projects independently – no direct reports, but responsible for managing whether the delivery team assigned to each project is producing on schedule.
• Engages system integrators and strategic vendor partners primarily from a procurement and delivery-coordination standpoint.
• Splits time across projects already in flight (inherited from the current department lead, who has recently stepped into the role) and net-new initiatives that have not yet been scoped or kicked off.
• Initiatives run smaller than typical enterprise programs – each roughly half a million dollars in combined CapEx/OpEx – so the work is advisory and hands-on rather than large-program governance.

TECHNICAL ENVIRONMENT

• Initiative mix includes penetration testing projects and broader cybersecurity program deliverables; GRC (governance, risk, and compliance) advisory experience is directly relevant to the work in scope.
• No fixed toolset mandated – team currently runs delivery tracking through Excel and PowerPoint and is open to whatever PM tooling the candidate prefers (Jira, MS Project, or equivalent).
• Vendor and system integrator engagement is procurement-oriented – candidates coordinate services rather than perform hands-on integration work themselves.
• Compliance framework alignment (e.g., specific regulatory or security standards governing these initiatives) has been requested from the client and is not yet confirmed.

Must Have Skills:

1. 8+ years of IT or technology project delivery experience
2. Direct project delivery experience on cybersecurity, information security, or security-adjacent initiatives.
3. Demonstrated ability to run project delivery independently, without a supporting project management team, including coordinating vendors and system integrators from a procurement standpoint.
4. Strong communication skills and a collaborative working style, demonstrated in a fast-paced delivery environment.
5. University degree in a relevant discipline.

Nice to Have Skills:

1. PMP or PRINCE2 certification.
2. GRC (governance, risk, and compliance) background, particularly where paired with penetration testing project experience.
3. Prior advisory-style project management delivered specifically on cybersecurity engagements.
4. Organizational change management or communications-led delivery experience, for the profile skewed toward that side of the two positions.
5. Energy or utilities sector experience.

Job Location:

• Downtown Calgary, Alberta
• Hybrid Work Schedule (Mon/Tue/Thu in office)

WHAT SUCCESS LOOKS LIKE

• 8-12+ years of IT/technology project delivery, hands-on, running an independent portfolio without direct reports
• Energy or utilities preferred (e.g., pipeline, oil & gas); transferable regulated industries are acceptable
• Position 1: cybersecurity, penetration testing, or GRC advisory delivery depth.
• Position 2: strong OCM/communications-led delivery depth alongside baseline technical fluency. PMP/PRINCE2 is a plus for either, not required.
• Independent, collaborative, comfortable in a fast-paced environment with a mix of in-flight handoffs and net-new, un-scoped initiatives