Cyber Defence Strategy & Operations Lead

Ghd; Melbourne; In loco; AUD 180.000 - 280.000; Tempo pieno

Descrizione del lavoro

GHD seeks a Manager of Cyber Defence Strategy and Operations to lead enterprise cybersecurity strategy and day-to-day operational resilience within the Information Systems team. The role reports to the CTO and engages with the IS Leadership Team and Board Risk Committee to govern cyber risk posture.

You will build specialist sub-teams, govern security standards, and drive AI security and Zero Trust initiatives across Azure, identity and endpoints. A global, board-level impact awaits.

Competenze

• 12+ years in cyber security with leadership of specialist sub-functions.
• Expertise across security strategy, operations, threat intelligence, vulnerability management and architecture.
• Strong Zero Trust and Microsoft security stack expertise; regulatory frameworks (CMMC, FedRAMP, ASD Essential Eight, ISO 27001, NIST CSF).

Mansioni

• Develop and own GHD’s multi-year cybersecurity strategy and target-state security architecture.
• Represent GHD’s cyber risk posture to the CTO, IS Leadership Team and Board Risk Committee.
• Build specialist sub-teams (security architecture, vulnerability management, cyber GRC) to relieve the SOC and enable follow-the-sun coverage.
• Own the enterprise vulnerability-management programme with a measurable remediation cadence.
• Command incident response for significant events, coordinating IT, Legal, HR and Communications.
• Define and govern the Zero Trust programme across Azure, identity and endpoint estate.
• Own GHD’s AI security posture: agentic systems, non-human identities and shadow AI.
• Govern CMMC Level 2 and FedRAMP readiness as a commercial enabler for US Federal client work.

Conoscenze

Cyber security leadership

Security strategy

Security operations

Threat intelligence

Vulnerability management

Security architecture

Cloud security (Azure)

Identity security

Zero Trust

Executive/board communication

Formazione

CISSP

CISM

CMMC Registered Practitioner

Microsoft SC-100 or AZ-500

Strumenti

Defender

Sentinel

Entra ID

Purview

Descrizione del lavoro

Organisations don't innovate, people do.

Who are we looking for?

We're looking for a Manager of Cyber Defence Strategy and Operations to join our Information Systems team, based in either Sydney, Melbourne, or Brisbane. GHD is a global professional services company working across engineering, architecture, environment and advisory, helping our clients and communities meet the challenges of a changing world. Our Enterprise Strategy 2035, “We Master Technology,” places technology at the heart of how we deliver, and within Information Services & Technology (IS&T) our Cyber & Information Security function protects the organisation, our people and our clients. We are looking for a leader to own its strategy and its operational edge. As Manager - Cyber Defence Strategy and Operations, you will own GHD’s enterprise cybersecurity strategy and day-to-day operational resilience, and be the person who represents our cyber risk posture to the Chief Technology Officer, the IS Leadership Team and the Board Risk Committee. You will build genuine specialist depth beneath the Security Operations Centre, set and enforce enterprise security standards, and govern the security of an AI-era threat surface. This is both a strategic role and an operational command role, for a leader who is as credible in the boardroom as in the incident bridge.

• Develop and own GHD’s multi-year cybersecurity strategy and target-state security architecture.
• Represent GHD’s cyber risk posture to the CTO, the IS Leadership Team and the Board Risk Committee.
• Build specialist sub-teams (security architecture, vulnerability management, cyber GRC) to relieve the SOC of non-response work and restore true follow-the-sun coverage.
• Own the enterprise vulnerability-management programme and drive a measured remediation cadence with clear ownership.
• Command incident response for significant events, coordinating IT, Legal, HR and Communications.
• Define and govern the Zero Trust programme across GHD’s Azure, identity and endpoint estate.
• Own GHD’s AI security posture: agentic systems, non-human identities and shadow AI.
• Govern CMMC Level 2 and FedRAMP readiness as a commercial enabler for US Federal client work.

What you will bring to the team:

• 12+ years in cyber security, including building and leading specialist sub-functions (not just running a single SOC), ideally in a large or global organisation.
• Deep expertise across security strategy, operations, threat intelligence, vulnerability management and architecture, spanning cloud (Azure), endpoint, network, identity, application and data.
• Strong Zero Trust and Microsoft security stack expertise (Defender, Sentinel, Entra ID, Purview).
• Hands‑on experience with regulatory frameworks: CMMC Level 2, FedRAMP, ASD Essential Eight, ISO 27001 and NIST CSF.
• A track record of taking an organisation through a regulatory certification, and of presenting cyber risk to executive or board‑level audiences.
• Incident command experience, and the ability to set enterprise standards without creating adversarial relationships.
• Certifications: CISSP, CISM or equivalent (required); CMMC Registered Practitioner or Professional (highly desirable); Microsoft SC-100 or AZ‑500 (desirable).

Why you’ll love this role:

• Enterprise cyber leadership reporting to the CTO, with direct Board Risk Committee visibility.
• A build mandate: shape the strategy, the architecture and a genuine specialist team, not just keep the lights on.
• Security as a growth lever, with CMMC and FedRAMP readiness opening US Federal client work.
• The chance to define GHD’s AI security posture at a pivotal moment for the threat landscape.
• A global remit, central to Strategy 2035, “We Master Technology.”

GHD is an equal opportunity employer, and we want everyone to be able to fully participate in our recruitment process. We value a diverse workforce and an inclusive culture. We encourage applications from Aboriginal and Torres Strait Islander peoples and people of all identities. GHD embraces hybrid work arrangements to create a work environment focused on well‑being, flexibility and productivity where GHD people can thrive, this supports the diverse needs of our workforce while balancing the benefits of remote working with the value of face‑to‑face collaboration in the office.

About Us

Come together and make a meaningful impact.

We bring our people together to create something bigger and solve some of the world's most complex problems. Come and experience the power of commitment and see strategy and ideas come to life when you join GHD.

Let's drive real change.

Our Pledge to You

At GHD, we don’t just believe in the power of commitment, we live and breathe it every day.

See where your commitment could take you.

That's the #PowerOfCommitment

Who We Are

GHD is a global professional services company that leads through engineering, architecture, and construction expertise. We are an employee‑owned company with over 11,000 diverse and skilled individuals, across more than 200 offices spanning five continents.

The Power of Commitment is our brand promise. It’s what makes us different. We are bound to our stated vision and determination to address humanity’s most urgent needs: to make water, energy and urbanisation sustainable for generations to come.