Cyber Security Manager

Fyndr Group; Sydney; Hybrid; AUD 111,000 - 185,000; Full time

Job summary

Fyndr Group is seeking a senior information security leader to drive the security programme across our corporate technology, cloud platforms and digital products. You will own risk assessment, incident response and remediation efforts, while coordinating with security partners and internal teams.

The role requires deep security expertise, the ability to challenge recommendations, and strong stakeholder communication to executives and business leaders.

Qualifications

• Experience owning or significantly contributing to an organisation-wide security programme.
• Practical security operations experience, including investigation, incident response and vulnerability remediation.
• Strong understanding of cloud security and shared responsibilities, with the ability to assess controls across identity, networks and production systems.
• Experience challenging technical recommendations, reviewing evidence and verifying that security issues have been fixed.
• Working knowledge of PCI DSS and experience with security assessments, audit evidence and remediation.
• Confidence explaining technical risk to business leaders and coordinating across teams and suppliers.
• Experience directing an MSSP, security provider or specialist vendor.

Responsibilities

• Lead the security programme across corporate technology, cloud platforms, digital products and payments.
• Assess monitoring and detection coverage, investigate issues and ensure vulnerabilities are resolved.
• Validate security controls across cloud, identity, networks and endpoints with platform and digital teams.
• Lead cyber security incident response and drive recovery and improvements.
• Manage digital fraud risks with internal teams and payment providers on detection and mitigation.
• Oversee the PCI DSS annual assessment with external assessors, including evidence and remediation.
• Direct security partners and vendors, oversee penetration testing and ensure delivered results.
• Develop the Information Security Analyst and help teams make practical security decisions.

Skills

Security leadership

Incident response

Cloud security

PCI DSS

Vendor management

Security operations

Digital fraud

Job description

Up to $185,000 base + super, shares, bonus and additional benefits

Sydney | Hybrid | Four days in office

Help protect the digital platforms customers use to order, pay and engage with the business, alongside the corporate systems and distributed restaurant network that support them.

You’ll set security priorities and work closely with platform, digital and specialist security teams to make sure the right controls are in place and security gaps are resolved. This needs someone with the technical depth to investigate issues, challenge recommendations and check that improvements work in practice.

Reporting to the Head of Technology Services, you’ll manage one Information Security Analyst and work with technology leaders, business stakeholders and security partners.

THE ROLE

You’ll be responsible for:

• Leading the security programme across corporate technology, cloud platforms, digital products and payments.
• Assessing monitoring and detection coverage, investigating issues and ensuring vulnerabilities are properly resolved.
• Working with platform and digital teams to validate security controls across cloud, identity, networks and endpoints.
• Leading cyber security incident response and following through on recovery and improvements.
• Taking responsibility for digital fraud risks, working with internal teams and payment providers on detection and mitigation.
• Managing the annual PCI DSS assessment with external assessors, including evidence and remediation, alongside wider security assurance.
• Directing security partners and vendors, overseeing penetration testing and checking that agreed work delivers the required result.
• Developing the Information Security Analyst and helping teams make practical security decisions.

WHAT WE’R LOOKING FOR

You’ll bring broad security experience and sound technical judgement. You should be comfortable working directly with security evidence and tools, while knowing how to get effective delivery from internal teams and specialist providers.

Ideally, you’ll have:

• Experience owning or significantly contributing to an organisation-wide security programme.
• Practical security operations experience, including investigation, incident response and vulnerability remediation.
• A strong understanding of cloud security and shared responsibilities, with the ability to assess controls across identity, networks and production systems.
• Experience challenging technical recommendations, reviewing evidence and verifying that security issues have been fixed.
• Working knowledge of PCI DSS and experience with security assessments, audit evidence and remediation.
• Confidence explaining technical risk to business leaders and resolving responsibilities across teams and suppliers.
• Experience directing an MSSP, security provider or specialist vendor.

You do not need to have personally built every cloud control or operated every security platform. You do need enough technical depth to know what good looks like, ask the right questions and hold delivery teams accountable.

Experience with digital fraud, payments, retail, franchise or other transaction-heavy environments would be useful. Retail experience is not essential.

Experience using AI to improve security monitoring, investigation or assurance, or securing AI-enabled systems, would also be valuable.

WHY THIS ROLE?

You’ll have broad responsibility across customer-facing digital services and the technology behind a distributed restaurant network, with direct access to technology and business leadership.

For someone who enjoys solving security problems across teams and staying close to the technology, this is a chance to shape priorities and see the improvements through.