Information Security Manager

About the role

As a newly created position at Diversa Trustees Limited, the Information Security Manager will lead the design, implementation and ongoing management of the company’s information security and cyber‑security landscape. You will work closely with business stakeholders and external service providers to ensure compliance with Australian prudential standards such as CPS 234, CPS 230 and SPS 220.

Key responsibilities

• Lead Line‑1 management of the information security environment, both internally and across outsourced providers.
• Maintain and evolve the Information Security Policy Framework, standards, processes and procedures.
• Conduct security control testing, risk assessments and governance of information assets.
• Oversee the information security risk register and produce regular risk reporting for senior leadership and the Board.
• Manage internal and external audit activities, including liaison with auditors.
• Perform third‑party security risk assessments, supervision and reporting.
• Coordinate incident response, disaster recovery and business continuity planning.
• Develop and deliver security awareness and training programmes for all employees.
• Run external attack‑surface management, phishing simulations and related security‑behaviour improvement initiatives.
• Provide GRC thought leadership and education across the organisation.

Required profile

• 7+ years of experience in information security, preferably with a focus on Governance, Risk & Compliance (GRC).
• Degree or diploma in IT, Cybersecurity, Risk Management or a related discipline.
• Demonstrated experience in security control testing, risk assessments and audit support.
• Experience in the financial services or superannuation sector is highly regarded.
• Excellent written and verbal communication skills and the ability to engage stakeholders at all levels.

Required skills

• Information Security
• Cybersecurity
• Risk Management
• Governance, Risk & Compliance (GRC)
• Security control testing
• Incident response and disaster recovery

What we offer

• A collaborative, diverse workplace that values flexibility and work‑life balance.
• Opportunities to shape the security posture of a leading trustee organisation.
• Continuous professional development and exposure to regulatory frameworks.