Information Security Manager (Cyber Security Governance, Risk & Compliance)

About the role

An experienced Information Security Manager is sought to lead cyber security governance, risk, compliance and assurance across complex enterprise environments. The role combines strategic security oversight with hands-on work on risk management, governance, compliance and stakeholder engagement, working closely with business and technology leaders to strengthen cyber resilience and embed security best practices.

Key responsibilities

• Lead the delivery of information security governance, risk management, compliance and assurance activities
• Develop, maintain and improve security policies, standards, frameworks and controls
• Conduct security risk assessments and recommend mitigations
• Embed security-by-design with project teams and business stakeholders
• Ensure compliance with regulatory, contractual and industry requirements
• Set up security reporting, metrics, dashboards and governance forums
• Oversee security incident management and response
• Coordinate security audits, compliance reviews and remediation
• Monitor emerging threats and vulnerabilities, and coach and mentor team members
• Contribute security expertise to customer engagements, solution design and strategic initiatives

Required profile

• 7+ years in information security, cyber security, risk management or GRC roles
• Demonstrated experience leading security programs, teams or managed security services
• Experience in large enterprise or managed services environments
• Australian citizenship is mandatory; current NV2 security clearance required

Required skills

• Cyber security governance, risk assessment and compliance frameworks
• Security assurance, vulnerability management and incident management
• ISO 27001, ISO 27002, NIST Cyber Security Framework, Essential Eight, ISM, PSPF and CIS Controls
• Microsoft Azure, Microsoft Defender, Microsoft Sentinel and Microsoft 365 Security
• ITSM environments and ITIL Foundation or equivalent
• CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer or similar certifications highly regarded