Job Summary
Our client is seeking an experienced Information Security Manager to lead the delivery of cyber security governance, risk, compliance, and assurance activities across complex enterprise environments. This is a leadership-focused role that combines strategic security oversight with hands-on engagement across risk management, security governance, compliance, and stakeholder engagement.
You will work closely with business and technology leaders to strengthen cyber resilience, manage security risk, drive compliance outcomes, and embed security best practices across the organisation. This opportunity is well suited to an experienced cyber security professional looking to shape security strategy, influence executive stakeholders, and lead continuous improvement initiatives within a security-conscious environment.
What's in it for you?
- Opportunity to lead enterprise-wide cyber security governance and risk initiatives
- Influence security strategy and organisational cyber resilience outcomes
- Work closely with senior business and technology stakeholders
- Lead security assurance, compliance, and risk management activities
- Exposure to complex enterprise and government-focused environments
- Collaborative culture with opportunities to mentor and develop security professionals
- Diverse role spanning governance, risk, compliance, security operations, and assurance
- Lead the delivery of information security governance, risk management, compliance, and assurance activities
- Develop, maintain, and improve security policies, standards, frameworks, and controls
- Conduct security risk assessments and provide recommendations to mitigate identified risks
- Partner with project teams and business stakeholders to embed security-by-design principles
- Ensure compliance with regulatory, contractual, and industry security requirements
- Establish and maintain security reporting, metrics, dashboards, and governance forums
- Provide leadership and oversight for security incident management and response activities
- Coordinate security audits, compliance reviews, and remediation initiatives
- Monitor emerging threats, vulnerabilities, and industry trends to enhance security posture
- Coach and mentor team members while promoting a strong security culture
- Collaborate with stakeholders to identify opportunities for continuous improvement and security uplift
- Contribute security expertise to customer engagements, solution design activities, and strategic initiatives
- 7+ years' experience in Information Security, Cyber Security, Risk Management, or GRC-related roles
- Demonstrated experience leading security programs, teams, or managed security services
- Strong understanding of cyber security governance, risk assessment methodologies, and compliance frameworks
- Experience developing and implementing security policies, standards, and control frameworks
- Strong knowledge of security assurance, vulnerability management, and incident management practices
- Experience operating within large enterprise or managed services environments
- Excellent stakeholder engagement skills with the ability to influence senior leaders and executives
- Strong analytical, problem-solving, and decision-making capabilities
- Exceptional written and verbal communication skills, including executive reporting and presentations
- Experience supporting security audits, compliance assessments, and regulatory reviews
- CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer, or similar industry certifications
- Experience with ISO 27001, ISO 27002, NIST Cyber Security Framework, Essential Eight, ISM, PSPF, and CIS Controls
- Knowledge of Microsoft Azure, Microsoft Defender, Microsoft Sentinel, and Microsoft 365 Security
- Experience working within IT Service Management (ITSM) environments
- ITIL Foundation certification or equivalent experience
- Australian Citizenship is mandatory
- Current NV2 Security Clearance required
To apply and be considered for this role, please submit your current resume/CV through the advertised application process. Suitable candidates will be contacted to discuss the opportunity further and receive additional information about the position.
We are an inclusive employer committed to fostering a diverse and accessible workplace. We encourage applications from Aboriginal and Torres Strait Islander peoples, people with disabilities, LGBTQIA+ individuals, people of all ages, and those from culturally and linguistically diverse backgrounds.
#SCR-matt-kiss
