Carl Pitts - Cybersecurity Programme Manager CV

    Technical Programme Manager

    Get in touch

    Professional Summary

    Results-driven Technical Programme Manager with over 20 years' experience leading large-scale, cross-functional change programmes in highly regulated sectors, including defence, aviation, and critical infrastructure. Proven expertise in delivering complex organisational transformations, managing portfolios up to €250M, and driving structural and operational change while engaging senior stakeholders and ensuring robust governance.

    Key Skills

    Large-Scale Change & Transformation
    Programme Governance & Business Case Development
    Stakeholder Engagement & Political Acumen
    PRINCE2 / MSP / MoR / Scrum / ITIL V4
    Risk, Compliance & Assurance
    Leadership & Team Development
    Vendor & Resource Management

    Professional Experience

    Cyber Transformation Programme Manager

    SEFE · September 2025 – December 2025

    • Set up a new cybersecurity SIEM & Architecture transformation programme, including short-term delivery plans, resource requirements, and business engagement strategies.
    • Assessed current operations against regulatory frameworks (NIS2 and NIST) and created governance structures to drive the overall programme.

    Career Break

    February – September 2025

    • Recertified qualifications; authored books on Cyber Security and Project Management; published multiple LinkedIn articles on transformation trends.

    Cyber Transformation Programme Manager

    Stellantis · February 2023 – January 2025

    • Owned and delivered a $50M cybersecurity transformation roadmap, enforcing policy alignment and integrating tools to achieve 30% improvements in detection and response times.
    • Standardised processes across global teams, embedding governance, risk management, and zero-trust principles through DevSecOps integrations.
    • Led audits, risk assessments, and tabletop exercises; provided Board-level reporting on risks, compliance, and impacts.
    • Built senior stakeholder relationships to drive accountability, policy adoption, and operational resilience.

    Future SOC Transformation Programme Manager

    EasyJet · July 2021 – February 2023

    • Led the modernisation of security operations, delivering 25% faster incident response through tool integration and vulnerability management across 10,000 endpoints.
    • Established governance to ensure compliance with multiple standards; managed audits and delivered Exec/SteerCo updates with KPI insights.
    • Conducted resilience testing and DR planning; influenced senior leaders through technical briefings and cross-functional collaboration.

    Cyber Security Transformation Programme Manager

    Airbus · December 2018 – July 2021

    • Managed a €250M global cybersecurity portfolio, deploying solutions across 150,000 devices and achieving 30% risk reduction.
    • Optimised workflows, developed business cases for savings (€30M in avoided breach costs), and established programme governance.
    • Advised senior leadership on alignment with business objectives; led red-teaming and audits.

    Associate Trainer & Consultant

    ILX Group · April 2017 – December 2018

    • Delivered PRINCE2, MSP, MoR, ITIL, and Scrum training to over 1,200 professionals (97% pass rate).
    • Customised programmes for clients including Deloitte, Airbus, and the United Nations.

    Operations & Senior IT Programme Manager

    Etihad Airways · June 2009 – April 2017

    • Delivered a private airport with fully enabled Security, Baggage Handling, Departures and Arrivals.
    • Led £5M data centre migration and PMO establishment, standardising processes across 75 initiatives.

    Business Change Programme Manager

    Virgin Atlantic · December 2007 – May 2009

    • Delivered global rollout of Microsoft systems, migrating 5,000+ users and reducing support tickets by 30%.

    Senior Infrastructure Project Manager

    Rubicon Financial Services · August 2004 – December 2007

    • Delivered £5M+ projects, including DR models and vulnerability management, ensuring compliance and a 15% reduction in downtime.

    Certifications

    Project Management

    PRINCE2 Practitioner/Trainer
    MoR Practitioner/Trainer
    Scrum Master
    ITIL V4

    Cybersecurity

    CISM
    CISA
    Certified Ethical Hacker
    CISSP
    AWS Certified Security Speciality
    ISO 27001 Lead Implementer

    Microsoft

    Multiple MCSE
    MCSA
    MCT Specialist

    Education & Thought Leadership

    • Authored books and articles on frameworks, vulnerability management, and change.
    • Delivered keynotes and training on PRINCE2, MSP, and transformation topics.