GM, Information Security (CISO)

About the role

Latitude is seeking a General Manager of Information Security (CISO) to lead its information and cybersecurity function in Melbourne, combining executive leadership with deep technical judgement. Reporting to the Chief Risk Officer, the role is accountable for cybersecurity strategy and overall security posture, advising the Executive Leadership Team and the Board. It covers strategy, governance and assurance, security operations, identity management, asset management and recovery.

Key responsibilities

• Set a prioritised, multi-year cybersecurity roadmap aligned with business objectives, technology strategy and risk appetite.
• Establish security priorities and give executives and the Board a practical understanding of material exposures, investment choices and progress.
• Set architecture principles, engineering standards and control requirements across identity, cloud, applications, infrastructure and data, embedding security into technology change.
• Lead detection, investigation and response, directing significant incidents through containment, remediation and recovery.
• Drive risk-based vulnerability remediation, stronger identity and privileged access controls and measurable reductions in exploitable attack paths.
• Work with business and technology leaders to test whether critical services can withstand disruption and recover securely.
• Maintain an effective Information Security Management System, strengthen third-party security and set proportionate controls for AI and emerging technologies.
• Develop a high-performing security function, manage budgets, partners and specialist providers, and challenge risk acceptance decisions.

Required profile

• Significant leadership experience with accountability for enterprise security in a complex technology environment.
• Deep technical judgement across security architecture, engineering, operations, identity, cloud, application security, data protection and cyber resilience.
• Experience directing material cyber incidents, including investigation, containment, recovery and executive communication.
• Track record of improving enterprise security and validating controls through testing and independent assurance.
• Ability to explain technical risk and investment priorities to executives and Boards; experience in a regulated, highly controlled or critical-service environment.
• Australian financial services experience highly regarded, with familiarity with APRA CPS 234, CPS 230, the Australian Privacy Act, ASD Essentials, ISO 27001 and NIST CSF.

What we offer

• An extra week of paid leave each year through the Take 5 initiative.
• A hybrid working model combining home work with office presence.
• Sonder, a 24/7 wellbeing support app.
• Discounts on Latitude products and services.

Successful applicants must complete background checks.