Information Security Manager

INFORMATION SECURITY MANAGER
Up to $185,000 base + super + 5% shares, + 10% bonus + benefitsSydney, Hybrid, 4 days in office
 
Lead and improve information security across a broad technology environment spanning corporate systems, cloud platforms, digital products, payments and a distributed restaurant network.

You’ll set security priorities and strengthen the organisation’s overall security posture while remaining close to the technology across security operations, cloud, identity, incident response, vulnerability management and assurance.
Reporting to the Head of Technology Services, you’ll manage one Information Security Analyst and work closely with technology leaders, business stakeholders and specialist security partners.

THE ROLE
You’ll be responsible for:

• Leading and improving the enterprise information security programme, risk posture and security priorities.
• Working hands-on across security monitoring, SIEM, detection and investigation.
• Improving security across cloud platforms, enterprise identity, networks, endpoints and production environments.
• Leading cyber security incident response, vulnerability management and ongoing remediation.
• Strengthening security assurance using relevant standards and frameworks, including PCI DSS, privacy, Essential Eight, ISO 27001 and NIST.
• Working with technology and business leaders to assess risk and make practical security decisions.
• Managing MSSPs, security vendors and third-party security relationships.
• Developing the Information Security Analyst and strengthening capability within a small security function.

WHAT WE’RE LOOKING FOR
You’ll bring broad information security experience with enough technical depth to work directly with the environment.
Ideally, you’ll have:

• Experience leading or significantly contributing to an organisation-wide security programme.
• Strong hands-on security operations experience, including monitoring, SIEM and detection.
• Production experience across cloud security, enterprise identity and network security.
• Experience leading security incidents and vulnerability remediation.
• Strong security risk, compliance and assurance capability.
• Confidence explaining technical security risk to senior business and technology stakeholders.
• Experience managing an MSSP, security provider or specialist security vendor.

Experience with PCI DSS, digital fraud, retail, franchise or other distributed and transaction-heavy environments would be useful, but is not essential.

Experience using AI to improve security monitoring, investigation or assurance, or exposure to securing AI-enabled and agentic systems, would also be valuable.

WHY THIS ROLE?
This is an opportunity to influence security across a complex, highly visible technology environment while remaining genuinely hands-on.

You’ll have direct access to technology and business leadership, with the scope to improve security maturity and develop a capable internal security function.