Cyber Security - Information Security Manager

E2 Cyber; Canberra; On-site; AUD 140,000 - 200,000; Full time

Job summary

E2 Cyber is seeking an Information Security Manager to lead governance, risk, compliance, and assurance across complex enterprise environments. You will drive security strategy, engage executives, and embed security best practices while mentoring a security-focused team.

You will partner with business and technology leaders to strengthen cyber resilience, manage risk, and ensure compliance across programs and vendors.

Qualifications

• 7+ years in Information Security, Cyber Security, Risk Management, or GRC roles.
• Proven experience leading security programs, teams, or managed security services.
• Strong governance, risk assessment, and compliance framework know-how.
• Experience building and implementing security policies, standards, and control frameworks.
• Knowledge of security assurance, vulnerability management, and incident management practices.

Responsibilities

• Lead the delivery of information security governance, risk management, compliance, and assurance activities.
• Develop, maintain, and improve security policies, standards, frameworks, and controls.
• Conduct security risk assessments and provide recommendations to mitigate identified risks.
• Partner with project teams to embed security-by-design principles.
• Ensure regulatory, contractual, and industry security requirements are met.
• Establish security reporting, metrics, dashboards, and governance forums.
• Lead security incident management and remediation activities.
• Coordinate audits, compliance reviews, and remediation initiatives.

Skills

Leadership

Stakeholder engagement

Security governance

Risk assessment

Executive reporting

Education

CISSP

CISM

CRISC

ISO 27001 Lead Auditor/Implementer

ITIL Foundation

Tools

Azure

Microsoft Defender

Microsoft Sentinel

Microsoft 365 Security

ITSM

Job description

Information Security Manager

Job Summary

Our client is seeking an experienced Information Security Manager to lead the delivery of cyber security governance, risk, compliance, and assurance activities across complex enterprise environments. This is a leadership-focused role that combines strategic security oversight with hands-on engagement across risk management, security governance, compliance, and stakeholder engagement.

You will work closely with business and technology leaders to strengthen cyber resilience, manage security risk, drive compliance outcomes, and embed security best practices across the organisation. This opportunity is well suited to an experienced cyber security professional looking to shape security strategy, influence executive stakeholders, and lead continuous improvement initiatives within a security-conscious environment.

What's in it for you?

• Opportunity to lead enterprise-wide cyber security governance and risk initiatives
• Influence security strategy and organisational cyber resilience outcomes
• Work closely with senior business and technology stakeholders
• Lead security assurance, compliance, and risk management activities
• Exposure to complex enterprise and government-focused environments
• Collaborative culture with opportunities to mentor and develop security professionals
• Diverse role spanning governance, risk, compliance, security operations, and assurance

What will you be doing?

• Lead the delivery of information security governance, risk management, compliance, and assurance activities
• Develop, maintain, and improve security policies, standards, frameworks, and controls
• Conduct security risk assessments and provide recommendations to mitigate identified risks
• Partner with project teams and business stakeholders to embed security-by-design principles
• Ensure compliance with regulatory, contractual, and industry security requirements
• Establish and maintain security reporting, metrics, dashboards, and governance forums
• Provide leadership and oversight for security incident management and response activities
• Coordinate security audits, compliance reviews, and remediation initiatives
• Monitor emerging threats, vulnerabilities, and industry trends to enhance security posture
• Coach and mentor team members while promoting a strong security culture
• Collaborate with stakeholders to identify opportunities for continuous improvement and security uplift
• Contribute security expertise to customer engagements, solution design activities, and strategic initiatives

Skills and experience required to succeed in this role?

• 7+ years' experience in Information Security, Cyber Security, Risk Management, or GRC-related roles
• Demonstrated experience leading security programs, teams, or managed security services
• Strong understanding of cyber security governance, risk assessment methodologies, and compliance frameworks
• Experience developing and implementing security policies, standards, and control frameworks
• Strong knowledge of security assurance, vulnerability management, and incident management practices
• Experience operating within large enterprise or managed services environments
• Excellent stakeholder engagement skills with the ability to influence senior leaders and executives
• Strong analytical, problem-solving, and decision-making capabilities
• Exceptional written and verbal communication skills, including executive reporting and presentations
• Experience supporting security audits, compliance assessments, and regulatory reviews

Highly Regarded

• CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer, or similar industry certifications
• Experience with ISO 27001, ISO 27002, NIST Cyber Security Framework, Essential Eight, ISM, PSPF, and CIS Controls
• Knowledge of Microsoft Azure, Microsoft Defender, Microsoft Sentinel, and Microsoft 365 Security
• Experience working within IT Service Management (ITSM) environments
• ITIL Foundation certification or equivalent experience

Clearance required?

• Australian Citizenship is mandatory
• CurrentNV2 Security Clearance required

We are an inclusive employer committed to fostering a diverse and accessible workplace. We encourage applications from Aboriginal and Torres Strait Islander peoples, people with disabilities, LGBTQIA+ individuals, people of all ages, and those from culturally and linguistically diverse backgrounds.

#SCR-matt-kiss