Cyber Security Lead

NobleOak Life Limited; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

NobleOak is seeking a Cyber Security Lead to shape the security strategy, governance and risk framework across the business.

This role blends strategic leadership with hands-on delivery, engaging with executives and regulators, guiding incident response, risk assessments and compliance obligations.

You will lead one direct report and collaborate with project teams to embed security-by-design, while managing third-party security risks and awareness programs.

Qualifications

• 7+ years of experience in cyber security or technology risk.
• Strong governance, risk and compliance knowledge.
• Experience in regulated environments (financial services, insurance, banking).
• Leadership experience and ability to coach others.

Responsibilities

• Lead cyber security strategy, governance framework and risk management across the business.
• Maintain and evolve the Information Security Framework.
• Ensure compliance with CPS234, Essential Eight and other relevant standards.
• Own the cyber risk management program and cyber risk register.
• Lead cyber security awareness and education initiatives across the organisation.

Skills

Cyber security leadership

Governance & risk

Stakeholder management

Incident response

Security strategy

Security awareness

Regulated environments

Job description

At NobleOak, we’re a high-growth challenger brand in the life insurance industry, with a team of around 180 employees, committed to protecting Australians and their families.

Our purpose is simple: to build and protect Australian wealth with integrity.

As we continue to grow and evolve our technology environment, we're looking for an experienced Cyber Security Lead who can help us protect what matters most: our customers, our people and our business.

Job Description

The Role

Looking for a leadership role where you can still be hands-on?

We're looking for a Cyber Security Lead to lead NobleOak's cyber security strategy, governance and risk management framework.

We're looking for a cyber security professional who enjoys being both strategic and hands-on. Someone who can confidently engage with executives and regulators one day, and work through security incidents, risk assessments or compliance obligations the next.

You'll be the subject matter expert for cyber security across the business, partnering closely with leaders, project teams, vendors and external stakeholders to ensure security is considered in everything we do.

You'll also lead and develop one direct report, giving you the opportunity to combine leadership responsibilities with meaningful hands-on involvement.

What You’ll Be Doing

No two days will look exactly the same - but you’ll be:

• Leading NobleOak's cyber security strategy, governance framework and compliance obligations
• Maintaining and evolving our Information Security Framework
• Ensuring compliance with CPS234, Essential Eight and other relevant standards
• Owning the cyber risk management program and cyber risk register
• Providing advice to business leaders on cyber security risks and opportunities
• Overseeing security operations, vulnerability management and incident response activities
• Supporting technology projects to ensure security-by-design principles are embedded from the start
• Managing supplier and third-party security risks
• Leading cyber security awareness and education initiatives across the organisation
• Providing reporting, insights and recommendations to senior stakeholders
• Leading and developing our Cyber Security Specialist
• Lead the governance, risk management and responsible use of Artificial Intelligence (AI)
• Driving continuous improvement across our cyber security controls and maturity capability

Desired Skills and Experience

What You Bring

We're less interested in hierarchy and more interested in capability. You'll likely bring:

• 7+ years' experience in cyber security, information security or technology risk
• Strong knowledge of governance, risk and compliance frameworks
• Experience operating in a regulated environment such as financial services, insurance or banking
• A practical understanding of frameworks such as CPS234, Essential Eight, NIST and ISO27001
• Experience managing security incidents, audits, risk assessments and remediation activities
• Strong stakeholder management skills and the ability to influence at all levels of the business
• A pragmatic approach that balances security requirements with business outcomes
• Previous leadership experience and a genuine desire to coach and develop others
• The confidence to make decisions, challenge constructively and drive accountability
• Most importantly, a willingness to get involved and do the work when required, rather than simply directing it from afar

Why Join Us?

• Be the cyber security leader for a growing ASX-listed financial services organisation
• Work closely with senior leaders and directly influence business decisions
• Own and shape the future cyber security roadmap
• Join a collaborative, down-to-earth team
• Purpose-driven culture where your work makes a genuine difference
• Opportunity to balance strategic leadership with meaningful hands-on involvement

Ready to Apply?

If you're an experienced cyber security professional who enjoys solving problems, influencing stakeholders and rolling up your sleeves when it counts, we'd love to hear from you.

At NobleOak, we're proud to build teams made up of capable, curious and grounded people who care about doing great work and supporting each other along the way.