Cyber Security Lead

Align Talent Pty Ltd; City of Brisbane; On-site; AUD 180,000 - 260,000; Full time

Job summary

Align Talent is partnering with a well-established software and data business in Australia to lead cyber security across the company, from corporate environments to client-facing products. You will report to the executive team and build the function from the ground up to give customers confidence in security.

The initial months focus on understanding systems, identifying high-priority issues, and delivering visible progress with a roadmap that will evolve over 6–18 months.

Qualifications

• Mature, pragmatic and self-directed, comfortable working without supervision.
• Hands-on experience implementing cyber security controls, not advisory alone.

Responsibilities

• Act as the subject matter expert on cyber security, advising leadership on risk and priorities
• Assess the current security position and deliver early wins against the highest priority issues
• Build and deliver a roadmap towards the most appropriate security standard or framework
• Develop policies and controls that map to that standard and reflect how the team actually works
• Guide the development team on secure-by-design practices and keep build and release pipelines secure
• Own the corporate security stack, including Microsoft 365, endpoint protection, network access and credential management
• Lead incident response and investigate outages when they occur
• Act as the point of contact for customers on security matters

Skills

Hands-on security

DevSecOps

Secure-by-design

Incident response

Stakeholder comms

Azure knowledge

IaC tooling

M365 security

Threat monitoring

Energy sector interest

Tools

Azure

CI/CD tooling

Security scanners

SOC AESCSF

Job description

We're exclusively partnering with a well-established software and data business that helps participants in Australia's National Electricity Market monitor, analyse and make sense of market data.

The business is financially stable, has long-standing client relationships and runs a nimble culture with no unnecessary bureaucracy. Customers come first, and people take ownership of problems without waiting to be asked.

This role owns cyber security across the business, from the corporate environment through to client-facing products. You'll report to the executive team and build the function from the ground up. The aim is twofold: to make the business genuinely more secure, and to give customers confidence in that.

The first few months are about getting to know the systems and identifying the highest priority issues, then delivering visible progress against them alongside an agreed roadmap. The plan is expected to evolve over the next 6-18 months, and the role will grow with it.

This is a role for someone who is hands-on, comfortable being the only security person in the business, and able to lift security without getting in the way of a team that already works well.

Key responsibilities

• Act as the subject matter expert on cyber security, advising leadership on risk and priorities
• Assess the current security position and deliver early wins against the highest priority issues
• Build and deliver a roadmap towards the most appropriate security standard or framework
• Develop policies and controls that map to that standard and reflect how the team actually works
• Guide the development team on secure-by-design practices and keep build and release pipelines secure
• Own the corporate security stack, including Microsoft 365, endpoint protection, network access and credential management
• Lead incident response and investigate outages when they occur
• Act as the point of contact for customers on security matters

About you

• Mature, pragmatic and self-directed, comfortable working without supervision
• Able to drive change without disrupting a business that runs well
• Comfortable delivering in increments and adjusting the plan as you learn more
• Curious, and always looking for better ways of doing things
• Confident making the case for change based on evidence
• A clear communicator with non-technical colleagues and customers
• Hands-on experience implementing cyber security controls, not assessment or advisory alone (non-negotiable)
• DevSecOps experience across the software development lifecycle, CI/CD pipelines and security scanning
• Working knowledge of Azure, infrastructure as code and configuration management tooling
• Microsoft 365 security including conditional access, along with authentication and edge security
• Exposure to SOCI or the AESCSF, or experience implementing comparable frameworks
• Broad awareness of the security tooling landscape, with no bias towards any one vendor
• Experience in, or a genuine interest in, the energy sector

Why you'll want to join

• Build and own a security function from the ground up
• Breadth across corporate security, product security and operations that larger organisations rarely offer
• A direct line to the owners of the business, where decisions get made quickly
• Exposure to an energy market going through significant change

Additional information

• Brisbane-based preferred, with strong candidates in Sydney or Melbourne considered
• Permanent, full time

Align Talent is committed to connecting great candidates with opportunities where diverse perspectives are valued. Teams with different ideas and experiences are more creative, effective, and innovative. If this role excites you but you don't meet every point on the job description, applications from all qualified candidates are encouraged - skills, curiosity, and enthusiasm matter most.