Cyber Security - Information Security Manager

E2 Cyber; Australian Capital Territory; Sur place; AUD 180 000 - 240 000; Plein temps

Avantages offerts par ce poste

Leadership exposure

Mentor security professionals

Executive stakeholder engagement

Diverse enterprise environments

Canberra area focus

Résumé du poste

E2 Cyber is seeking an Information Security Manager to lead governance, risk, and assurance across complex environments in Australia. The role blends strategic oversight with hands-on risk management and stakeholder engagement to strengthen cyber resilience and compliance.

You will work with business and technology leaders to embed security best practices, manage security programs, and drive continuous improvement across governance, risk, and operations.

Qualifications

• 7+ years in Information Security, Cyber Security, Risk Management, or GRC roles.
• Led security programs, teams, or MSSP services.
• Strong governance, risk assessment, and compliance knowledge.
• Developed and implemented security policies and controls.
• Knowledge of assurance, vulnerability, and incident management practices.
• Experience in large enterprise or managed services environments.
• Excellent stakeholder engagement with senior leaders.
• Strong analytical, problem-solving, and decision-making abilities.
• Exceptional written and verbal communication for executive reporting.
• Experience supporting audits and regulatory reviews.

Responsabilités

• Lead governance, risk, compliance, and assurance activities.
• Develop and improve security policies, standards, and controls.
• Conduct risk assessments and mitigate identified risks.
• Embed security-by-design with project teams and business stakeholders.
• Ensure regulatory and contractual compliance.
• Establish security reporting, metrics, and governance forums.
• Oversee security incident management and response.
• Coordinate audits, reviews, and remediation initiatives.
• Monitor threats, vulnerabilities, and trends to uplift security posture.
• Coach and mentor team members and promote security culture.
• Collaborate on continuous improvement and customer engagements.

Connaissances

Security governance

Risk management

Executive communication

Security program leadership

Vulnerability management

Incident management

Audits & compliance

Stakeholder engagement

Problem solving

Decision making

Formation

CISSP

CISM

CRISC

ISO 27001 Lead Auditor/Implementer

Security certifications (ISA/ISM)

Outils

Azure

Microsoft Defender

Microsoft Sentinel

Microsoft 365 Security

Description du poste

Information Security Manager

Job Summary

Our client is seeking an experienced Information Security Manager to lead the delivery of cyber security governance, risk, compliance, and assurance activities across complex enterprise environments. This is a leadership-focused role that combines strategic security oversight with hands-on engagement across risk management, security governance, compliance, and stakeholder engagement.

You will work closely with business and technology leaders to strengthen cyber resilience, manage security risk, drive compliance outcomes, and embed security best practices across the organisation. This opportunity is well suited to an experienced cyber security professional looking to shape security strategy, influence executive stakeholders, and lead continuous improvement initiatives within a security-conscious environment.

What's in it for you?

• Opportunity to lead enterprise-wide cyber security governance and risk initiatives
• Influence security strategy and organisational cyber resilience outcomes
• Work closely with senior business and technology stakeholders
• Lead security assurance, compliance, and risk management activities
• Exposure to complex enterprise and government-focused environments
• Collaborative culture with opportunities to mentor and develop security professionals
• Diverse role spanning governance, risk, compliance, security operations, and assurance

What will you be doing?

• Lead the delivery of information security governance, risk management, compliance, and assurance activities
• Develop, maintain, and improve security policies, standards, frameworks, and controls
• Conduct security risk assessments and provide recommendations to mitigate identified risks
• Partner with project teams and business stakeholders to embed security-by-design principles
• Ensure compliance with regulatory, contractual, and industry security requirements
• Establish and maintain security reporting, metrics, dashboards, and governance forums
• Provide leadership and oversight for security incident management and response activities
• Coordinate security audits, compliance reviews, and remediation initiatives
• Monitor emerging threats, vulnerabilities, and industry trends to enhance security posture
• Coach and mentor team members while promoting a strong security culture
• Collaborate with stakeholders to identify opportunities for continuous improvement and security uplift
• Contribute security expertise to customer engagements, solution design activities, and strategic initiatives

Skills and experience required to succeed in this role?

• 7+ years' experience in Information Security, Cyber Security, Risk Management, or GRC-related roles
• Demonstrated experience leading security programs, teams, or managed security services
• Strong understanding of cyber security governance, risk assessment methodologies, and compliance frameworks
• Experience developing and implementing security policies, standards, and control frameworks
• Strong knowledge of security assurance, vulnerability management, and incident management practices
• Experience operating within large enterprise or managed services environments
• Excellent stakeholder engagement skills with the ability to influence senior leaders and executives
• Strong analytical, problem-solving, and decision-making capabilities
• Exceptional written and verbal communication skills, including executive reporting and presentations
• Experience supporting security audits, compliance assessments, and regulatory reviews

Highly Regarded

• CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer, or similar industry certifications
• Experience with ISO 27001, ISO 27002, NIST Cyber Security Framework, Essential Eight, ISM, PSPF, and CIS Controls
• Knowledge of Microsoft Azure, Microsoft Defender, Microsoft Sentinel, and Microsoft 365 Security
• Experience working within IT Service Management (ITSM) environments
• ITIL Foundation certification or equivalent experience

Clearance required?

• Australian Citizenship is mandatory
• CurrentNV2 Security Clearance required

We are an inclusive employer committed to fostering a diverse and accessible workplace. We encourage applications from Aboriginal and Torres Strait Islander peoples, people with disabilities, LGBTQIA+ individuals, people of all ages, and those from culturally and linguistically diverse backgrounds.