Cyber Security Manager

Fyndr Group; Sydney; Hybrid; AUD 150,000 - 185,000; Full time

Job summary

Fyndr Group is seeking an experienced Information Security Leader to oversee the security program across cloud, networks and production environments. You will guide risk posture, direct incident response, and drive practical security decisions with technology and business leaders.

The role emphasizes hands-on operations, governance, and collaboration with external vendors to strengthen the security function while maturing security maturity across the organisation.

Qualifications

• Experience leading or significantly contributing to an enterprise security programme.
• Hands-on security operations experience with monitoring, SIEM, detection.
• Production experience across cloud security, enterprise identity and network security.
• Experience leading security incidents and remediation.
• Strong security risk, compliance and assurance capability.
• Ability to explain security risk to senior stakeholders.
• Experience managing MSSPs or security vendors.

Responsibilities

• Lead and improve the enterprise information security programme, risk posture and security priorities.
• Work hands-on across security monitoring, SIEM, detection and investigation.
• Improve security across cloud platforms, enterprise identity, networks, endpoints and production environments.
• Lead cyber security incident response, vulnerability management and ongoing remediation.
• Strengthen security assurance using PCI DSS, privacy, Essential Eight, ISO 27001 and NIST.
• Collaborate with technology and business leaders to assess risk and make practical security decisions.
• Manage MSSPs, security vendors and third-party security relationships.
• Develop the Information Security Analyst and strengthen capability within a small security function.

Skills

Security leadership

Security operations

Cloud security

Incident response

Vulnerability management

Risk & compliance

Stakeholder communication

Vendor management

Tools

SIEM tooling

MSSP management tools

PCI DSS

ISO 27001

NIST

Job description

Up to $185,000 base + super, shares, bonus and additional benefits

Sydney | Hybrid | Four days in office

Lead and improve information security across a broad technology environment spanning corporate systems, cloud platforms, digital products, payments and a distributed restaurant network.

You’ll set security priorities and strengthen the organisation’s overall security posture while remaining close to the technology across security operations, cloud, identity, incident response, vulnerability management and assurance.

Reporting to the Head of Technology Services, you’ll manage one Information Security Analyst and work closely with technology leaders, business stakeholders and specialist security partners.

THE ROLE

You’ll be responsible for:

• Leading and improving the enterprise information security programme, risk posture and security priorities.
• Working hands-on across security monitoring, SIEM, detection and investigation.
• Improving security across cloud platforms, enterprise identity, networks, endpoints and production environments.
• Leading cyber security incident response, vulnerability management and ongoing remediation.
• Strengthening security assurance using relevant standards and frameworks, including PCI DSS, privacy, Essential Eight, ISO 27001 and NIST.
• Working with technology and business leaders to assess risk and make practical security decisions.
• Managing MSSPs, security vendors and third-party security relationships.
• Developing the Information Security Analyst and strengthening capability within a small security function.

WHAT WE’RE LOOKING FOR

You’ll bring broad information security experience with enough technical depth to work directly with the environment.

Ideally, you’ll have:

• Experience leading or significantly contributing to an organisation-wide security programme.
• Strong hands-on security operations experience, including monitoring, SIEM and detection.
• Production experience across cloud security, enterprise identity and network security.
• Experience leading security incidents and vulnerability remediation.
• Strong security risk, compliance and assurance capability.
• Confidence explaining technical security risk to senior business and technology stakeholders.
• Experience managing an MSSP, security provider or specialist security vendor.

Experience with PCI DSS, digital fraud, retail, franchise or other distributed and transaction-heavy environments would be useful, but is not essential.

Experience using AI to improve security monitoring, investigation or assurance, or exposure to securing AI-enabled and agentic systems, would also be valuable.

WHY THIS ROLE?

This is an opportunity to influence security across a complex, highly visible technology environment while remaining genuinely hands-on.

You’ll have direct access to technology and business leadership, with the scope to improve security maturity and develop a capable internal security function.