Head of Cyber Defence and Engineering

About the role

ASX, Australia's financial markets exchange, is recruiting a Head of Cyber Defence and Engineering for its Cyber Security team. The team protects ASX's systems, data and critical services through cyber governance, risk management, security engineering, identity security and threat response, with the purpose of strengthening cyber resilience and the security, integrity and availability of ASX's information assets and market infrastructure.

Key responsibilities

• Lead the proactive cyber defence strategy, minimising attacker dwell time and maximising business survivability
• Provide leadership and oversight of the Security Operations Centre (SOC), threat detection, monitoring and incident response
• Direct specialised engineering functions using agentic AI to accelerate automated detection, triage and response at scale
• Elevate threat intelligence and proactive hunting, establishing an AI-assisted threat hunting function focused on critical enterprise risks
• Drive continuous improvement of cyber defence capabilities, technologies, processes and operating models
• Lead incident response, coordinating containment, eradication, recovery and post-incident reviews
• Manage cyber defence tooling including SIEM, SOAR, EDR/XDR, attack surface management and security analytics platforms
• Develop cyber resilience capabilities, including monitoring, response, recovery and crisis management preparedness
• Establish metrics, reporting and dashboards to measure cyber defence effectiveness and communicate risk to executives
• Partner with technology, risk and business teams to strengthen cyber controls, manage third-party security providers and strategic partnerships
• Build, mentor and lead a cyber defence team and support regulatory, audit and compliance requirements

Required profile

• 10+ years in technology, with 5+ years in IT leadership and 5+ years specialising in cyber security
• Deep expertise in SOC operations, incident response, vulnerability management, threat intelligence and offensive tradecraft (Red/Purple teaming)
• Ability to turn complex threat telemetry and adversary insights into strategic business narratives for executives and the Board
• Nice to have: experience in financial services, market infrastructure, banking, payments, clearing or other highly regulated environments
• Legally authorised to work in Australia permanently; background checks are part of onboarding

Required skills

• SOC operations, incident response and vulnerability management
• Threat intelligence and offensive tradecraft (Red/Purple teaming)
• Agentic AI, detection-as-code and automation in security workflows
• SIEM, SOAR, EDR/XDR and attack surface management