Cyber Security Lead

PRA; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

PRA in Sydney is seeking an experienced cyber security leader to own the strategy and roadmap for information security across the organisation. You will report to Head of IT & Data and lead a Cyber Security Specialist, shaping security operations, governance, and incident response.

Ideal candidates have 7–10 years in cyber or technology risk, hands-on SOC 2, and practical experience with NIST, CPS 234, Azure and SIEM/EDR. This role offers a hands-on leadership path in a high-growth insurer.

Qualifications

• 7–10 years in cyber, information security or technology risk (financial services or insurance preferred).
• Hands-on SOC 2 experience essential.
• Track record of delivering a security roadmap.
• Experience dealing with threats and incidents.
• Working knowledge of NIST and CPS 234.
• Azure, SIEM, EDR and vulnerability management experience.

Responsibilities

• Own the cyber security strategy and roadmap from plan to delivery.
• Ensure compliance with SOC 2, CPS 234, Essential Eight and NIST.
• Oversee security operations, including firewall and network controls.
• Lead major incident response and recovery efforts.
• Direct AI governance and security initiatives.

Skills

SOC 2

NIST

CPS 234

Azure

SIEM

EDR

Vulnerability management

Threat & incident mgmt

Job description

I'm recruiting for a high-growth challenger life insurer whose purpose is to protect Australians and their families.

This is a hands-on leadership role reporting to the Head of IT & Data, with one Cyber Security Specialist to lead.

What you'll own:

• The cyber security strategy and roadmap, from plan to delivery
• Compliance with SOC 2, CPS 234, Essential Eight and NIST
• Security operations, including firewall and network controls
• Major incident response and recovery
• The direction for AI governance and security

What you'll bring:

• 7 to 10 years in cyber, information security or technology risk (financial services or insurance preferred)
• Hands-on SOC 2 experience (essential)
• A track record of delivering a security roadmap
• Real experience dealing with threats and incidents
• Working knowledge of NIST and CPS 234
• Azure, SIEM, EDR and vulnerability management experience