Cyber Security - Information Security Manager

Information Security Manager Job Summary

Our client is seeking an experienced Information Security Manager to lead the delivery of cyber security governance, risk, compliance, and assurance activities across complex enterprise environments. This is a leadership-focused role that combines strategic security oversight with hands-on engagement across risk management, security governance, compliance, and stakeholder engagement.

You will work closely with business and technology leaders to strengthen cyber resilience, manage security risk, drive compliance outcomes, and embed security best practices across the organisation. This opportunity is well suited to an experienced cyber security professional looking to shape security strategy, influence executive stakeholders, and lead continuous improvement initiatives within a security-conscious environment.

What's in it for you?

• Opportunity to lead enterprise-wide cyber security governance and risk initiatives
• Influence security strategy and organisational cyber resilience outcomes
• Work closely with senior business and technology stakeholders
• Lead security assurance, compliance, and risk management activities
• Exposure to complex enterprise and government-focused environments
• Collaborative culture with opportunities to mentor and develop security professionals
• Diverse role spanning governance, risk, compliance, security operations, and assurance

What will you be doing?

• Lead the delivery of information security governance, risk management, compliance, and assurance activities
• Develop, maintain, and improve security policies, standards, frameworks, and controls
• Conduct security risk assessments and provide recommendations to mitigate identified risks
• Partner with project teams and business stakeholders to embed security-by-design principles
• Ensure compliance with regulatory, contractual, and industry security requirements
• Establish and maintain security reporting, metrics, dashboards, and governance forums
• Provide leadership and oversight for security incident management and response activities
• Coordinate security audits, compliance reviews, and remediation initiatives
• Monitor emerging threats, vulnerabilities, and industry trends to enhance security posture
• Coach and mentor team members while promoting a strong security culture
• Collaborate with stakeholders to identify opportunities for continuous improvement and security uplift
• Contribute security expertise to customer engagements, solution design activities, and strategic initiatives

Skills and experience required to succeed in this role?

• 7+ years' experience in Information Security, Cyber Security, Risk Management, or GRC-related roles
• Demonstrated experience leading security programs, teams, or managed security services
• Strong understanding of cyber security governance, risk assessment methodologies, and compliance frameworks
• Experience developing and implementing security policies, standards, and control frameworks
• Strong knowledge of security assurance, vulnerability management, and incident management practices
• Experience operating within large enterprise or managed services environments
• Excellent stakeholder engagement skills with the ability to influence senior leaders and executives
• Strong analytical, problem-solving, and decision-making capabilities
• Exceptional written and verbal communication skills, including executive reporting and presentations
• Experience supporting security audits, compliance assessments, and regulatory reviews

Highly Regarded

• CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer, or similar industry certifications
• Experience with ISO 27001, ISO 27002, NIST Cyber Security Framework, Essential Eight, ISM, PSPF, and CIS Controls
• Knowledge of Microsoft Azure, Microsoft Defender, Microsoft Sentinel, and Microsoft 365 Security
• Experience working within IT Service Management (ITSM) environments
• ITIL Foundation certification or equivalent experience

Clearance required?

• Australian Citizenship is mandatory
• CurrentNV2 Security Clearance required

We are an inclusive employer committed to fostering a diverse and accessible workplace. We encourage applications from Aboriginal and Torres Strait Islander peoples, people with disabilities, LGBTQIA+ individuals, people of all ages, and those from culturally and linguistically diverse backgrounds.