Cyber Security Manager

Fantastic Furniture; Sydney; On-site; AUD 150,000 - 210,000; Full time

Job summary

Fantastic Furniture in Chullora, NSW seeks a Cyber Security Manager to lead governance, risk, compliance, SOC and security engineering. You will partner with technology teams, auditors, regulators, vendors and leadership to own the security program.

The role blends strategic ownership with hands-on delivery across cloud, identity, endpoint, server and related technologies, plus incident response and recovery. Five+ years in cybersecurity and relevant certifications are highly regarded.

Qualifications

• Five+ years in cybersecurity, security engineering or related technology discipline.
• Experience delivering governance, risk and compliance with hands-on technical delivery.
• Knowledge of identity, endpoint, network, cloud security and data protection.

Responsibilities

• Own and continuously improve the organisation's cybersecurity framework, policies, standards and control libraries.
• Lead security incident preparation and response, including detection, containment and recovery.
• Oversee security monitoring across networks, systems, applications and data.
• Coordinate security audits, assessments and remediation activities and manage third-party security providers.

Skills

Cybersecurity

Security operations

Incident response

Governance & risk

Education

Bachelor's degree or higher in a related field

CompTIA Security+ or CISSP (preferred)

Job description

About the role Reporting to the Infrastructure and Operations Manager, you will be Fantastic Furniture's primary cybersecurity subject matter expert. You will lead cybersecurity governance, risk, compliance, security operations, incident response and security engineering, working closely with technology teams, business leaders, auditors, regulators, vendors and managed service providers. The role combines strategic ownership with hands-on delivery. Cybersecurity remains your primary focus, while your practical infrastructure knowledge will enable you to support complex Level 3 issues across cloud, identity, endpoint, server and related technologies when required. What you'll do Own and continuously improve the organisation's cybersecurity framework, policies, standards, control libraries, information asset registers and procedures. Identify, assess and prioritise cyber risks and vulnerabilities, then drive practical mitigation plans through to completion. Lead security incident preparation and response, including detection, containment, investigation, recovery and post-incident improvement. Oversee security monitoring across networks, systems, applications and data, ensuring incidents are responded to within agreed service levels. Provide clear reporting on the organisation's security posture to senior leaders and the Audit & Risk Committee. Coordinate security audits, assessments and penetration testing, and manage resulting remediation activities. Assess third-party security risk and manage external security providers, auditors and technology vendors. Shape and oversee security architecture and technologies, including identity, endpoint, network, cloud, encryption, authentication and threat-detection controls. Promote a strong security-aware culture through practical education, communication and stakeholder engagement. Support infrastructure administration, technical changes, patching, backup and disaster recovery testing, plus complex Level 3 troubleshooting where needed. What you'll bring At least five years' experience across cybersecurity, security engineering, infrastructure engineering or a related technology discipline. Demonstrated ownership of cybersecurity outcomes in a small to medium-sized organisation. The ability to balance governance, risk and compliance responsibilities with hands-on technical delivery. Strong experience in incident response, vulnerability management, threat detection, security monitoring and third-party security management. Sound knowledge of identity and access management, endpoint security, network security, cloud security and data protection. Experience developing security policies, standards, procedures, architecture and control frameworks. An understanding of Australian privacy and cybersecurity obligations, including PCI DSS and the Australian Privacy Act. Strong communication, influencing and stakeholder-management skills, with the confidence to challenge constructively and translate risk into practical business decisions. A relevant bachelor's degree and an industry certification such as CompTIA Security+ or CISSP (Highly regarded) Experience with ISO 27001, the NIST Cybersecurity Framework and the ASD Essential Eight. CISM, CISA or another advanced security certification. Experience in retail, distribution, warehousing or another multi-site operating environment. Experience supporting cloud and infrastructure environments, security architecture, disaster recovery and business continuity activities.

Cyber Security Manager • Chullora, New South Wales, AU