Chief Information Security Officer

SecureTalent; Sydney; On-site; AUD 180,000 - 320,000; Full time

Job summary

SecureTalent is exclusively engaged to appoint a Chief Information Security Officer for a growing technology and cyber security organisation. Reporting to the CEO and joining the Executive Team, this is not a traditional governance-led CISO role.

We seek a technically credible security leader who can build and lead a dedicated Security function while operating across technical security, executive risk, assurance and customer engagement.

Qualifications

• Extensive senior leadership in cyber security across technical and governance domains.
• Hands-on background in application security, offensive security, pen testing and vulnerability research.
• Proven ability to build or transform security functions and teams.
• Strong ISO 27001/ISMS, risk management and assurance capability.
• Experienced with executive and board-level stakeholder engagement.

Responsibilities

• Own the organisation's security strategy and build a dedicated security function.
• Lead across security research, vulnerability management, threat intel and assurance.
• Oversee application security, security engineering, cloud security and incident response.
• Drive governance, risk, internal audit and government assurance programs (IRAP/ISM/PSPF).

Skills

Senior cyber security leadership

AppSec & pen testing

Vulnerability research

Security engineering/architecture

ISO 27001 / ISMS

Executive stakeholder experience

Threat intelligence & gov assurance

Job description

Chief Information Security Officer (CISO)

Confidential Executive Search | Cyber Security | Application Security

SecureTalent has been exclusively engaged to appoint a Chief Information Security Officer for a growing technology and cyber security organisation.

Reporting directly to the CEO and joining the Executive Team, this is not a traditional governance-led CISO role.

We are looking for a technically credible security leader who can build and lead a dedicated Security function while operating comfortably across technical security, executive risk, assurance and customer engagement.

The mandate:

You will take ownership of the organisation's security strategy and build out capability across:

• Security research, vulnerability management and threat intelligence
• Application security, penetration testing and technical assurance
• Security engineering, cloud security and incident response
• ISO 27001 / SOC 2 and the broader ISMS
• Technology risk, compliance and internal audit
• Government security assurance, including IRAP / ISM / PSPF
• Executive and Board-level cyber reporting
• Building and developing a high-performing technical security team

What we're looking for:

You may currently be a CISO, Head of Cyber Security, Head of Security, Security Director or senior technical security leader ready for broader executive accountability.

You’ll ideally bring:

• Significant senior cyber security leadership experience
• Strong technical foundations in AppSec, offensive security, penetration testing, vulnerability research, security engineering or architecture
• Experience building or materially transforming security functions
• Strong ISO 27001 / ISMS, risk and assurance capability
• Executive and Board-level stakeholder experience
• The technical credibility to lead security researchers, engineers and testing specialists

Experience across CVE discovery, security research, Red/Purple Teaming, threat intelligence and government assurance will be particularly highly regarded.

This role will not suit someone whose recent experience has been predominantly GRC, policy and compliance.

Further information regarding the organisation, mandate and package will be provided to suitably qualified candidates.