Cyber Security Manager

LEAP Legal Software, Inc.; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Job summary

LEAP Dev is seeking a Cyber Security Manager to own identity, endpoint, and Microsoft 365 security across LEAP, working with IT and business stakeholders daily.

You’ll shape mature security programs, including SOC 2 and ISO 27001, lead incident response, audits, and security awareness training across the organisation in a hybrid Sydney setting.

Qualifications

• Experience in an Information Security leadership role in enterprise environments.
• Strong governance, risk, and compliance knowledge including identity management and endpoint security.
• Hands-on with Microsoft 365 security tooling (Entra ID, Exchange Online, SharePoint, OneDrive, Teams, Intune).

Responsibilities

• Own identity, endpoint, and Microsoft 365 security across LEAP.
• Lead maturity of SOC 2 and ISO 27001 programs.
• Collaborate with IT and business stakeholders daily.
• Develop incident response playbooks to contain threats.
• Lead audits and assurance activities with Governance, Risk & Compliance.
• Partner with internal/external stakeholders on security requirements.
• Design and deliver security awareness training across the organisation.

Skills

Security leadership

Governance & compliance

Identity management

Endpoint security

Vulnerability management

Security awareness

CISSP/CISM certifications

Tools

Entra ID

Exchange Online

SharePoint

OneDrive

Teams

Intune

CrowdStrike

Job description

About LEAP Dev

LEAP Dev is the “Software House” powering LEAP Legal Software, the leading provider of Legal Practice Management Solutions in the world. We’re part of ATI Global – one of the largest international LegalTech companies. For more than 30 years, our curiosity and commitment to continual improvement have kept us reimagining productivity tools for lawyers and their staff to support our guiding purpose, to ‘Help lawyers who help people’. The market leading software we develop and support is used by more than 100,000 lawyers and their staff in small and medium sized law firms.

Working alongside our team of passionate high achievers, you’ll join a fast-growing technology business where things seldom stay the same for long. With more than 1000 smart, caring and ambitious ‘LEAPsters’ working together across Australia, Canada, the United States, the United Kingdom, the Republic of Ireland, Poland and New Zealand, you’ll find yourself in good company here.

Meet the Security team

Our Security team protects LEAP’s people, information, infrastructure and applications from an evolving cyber threat landscape. Working closely with internal teams and external partners, we embed practical, fit-for-purpose security practices across the business.

The team spans three specialist domains: Platform Security Engineering, Enterprise Security, and Governance, Risk & Compliance, which work closely together to deliver a mature, scalable and enterprise-ready security capability. You’ll be joining an established, supportive group that values collaboration, shared ownership and high standards.

We’re passionate about staying ahead of emerging threats, investigating and responding to incidents using modern threat intelligence and tools to continuously strengthen LEAP’s security posture and protect what matters most.

What you’ll do

As Cyber Security Manager, you will take ownership of identity, endpoint, and Microsoft 365 security across LEAP, while supporting the wider information security and compliance program. You’ll work closely with IT and business stakeholders day-to-day and report to the CISO.

This is a senior role that blends hands‑on ownership with stakeholder leadership – you’ll shape how identity, endpoint, and vulnerability management practices evolve, and have a direct hand in maturing LEAP’s SOC 2 and ISO 27001 programs.

This role sits within Enterprise Security, owning corporate IT, identity, SaaS, and Microsoft 365 security. It works closely with Platform Security Engineering (product, cloud, and application security) and Governance, Risk & Compliance.

To make this happen, you will:

• Work closely with IT teams on the administration of security technologies, policies, and controls across the Microsoft ecosystem — including Entra ID, Exchange Online, SharePoint, OneDrive, Teams, and Intune.
• Own the security posture of SaaS applications, reviewing API permissions, third-party app approvals, and data sharing configurations to manage integration risk.
• Develop and test incident response playbooks to contain and remediate threats across endpoints, identity, SaaS, and cloud.
• Maintain endpoint detection and response tooling such as CrowdStrike, and lead reviews of security risks, vulnerabilities, and control effectiveness, including assessments and remediation tracking.
• Act as subject matter expert on identity and endpoint controls when Governance, Risk & Compliance runs audits and assurance activities.
• Partner with internal stakeholders, customers, and external parties on security requirements, acting as a trusted point of contact on policy and risk questions.
• Design and deliver security awareness education programs, building security capability across the wider organisation.

What you’ll bring

• Proven experience in an Information Security / Cyber Security leadership role, ideally within enterprise environments.
• Strong understanding of security governance, risk, and compliance, including identity management, endpoint security, vulnerability management, and security awareness.
• Hands‑on experience with Microsoft 365 and its security tooling – Entra ID, Exchange Online, SharePoint, OneDrive, Teams, and Intune.
• Working knowledge of security and compliance frameworks such as SOC 2, ISO 27001, or NIST. Exposure to AI governance, such as ISO 42001.
• Experience managing security risks, controls, and assurance activities, including audits, assessments, and remediation.
• A broad understanding across multiple cyber security domains, with the confidence to engage technical teams, senior leaders, customers, and auditors alike.
• Strong written and verbal communication skills, able to translate security concepts for both technical and non-technical audiences.
• Industry certifications such as CISSP, CISM, or Microsoft security certifications (SC‑300, SC‑200 or similar) are highly regarded.

You are the type of person who

• Takes ownership of security issues and drives them through to resolution.
• Builds pragmatic, trusted relationships across IT, engineering, and the business.
• Balances hands‑on delivery with the judgement to step up and lead when needed.
• Communicates risk and security concepts clearly to technical and non-technical audiences alike.
• Is comfortable being the “go‑to” person for identity and endpoint security questions.

LEAP is an inclusive, people‑first company committed to breaking down institutional barriers that keep people from reaching their potential. If you meet some, but not all the requirements above, we encourage you to still submit your application.

Why join LEAP?

• Your work matters. Helping lawyers help people sits at the heart of everything we do. We solve real world problems that improve and support local, everyday law firms. So they can do their best work for the people in the communities they serve.
• Make an impact. You won’t be another ‘cog in the wheel’ here. We give full trust and autonomy for you to be heard, to work on big & complex projects – and to make a real difference.
• Work with a group of authentic, passionate people who love what they do.
• Well-funded and global. LEAP is the leading provider of Legal Practice Management Solutions across Australia, Canada, the United States, the United Kingdom, the Republic of Ireland and New Zealand. We're part of ATI – one of the largest international LegalTech companies.
• Flexible and hybrid working. We'd like to find this person in Sydney, but we want you to work in a way that suits you and we're open to flexible arrangements that support you.
• Grow your career with us. Our founder Christian Beck has been building legal tech businesses for over 30 years. There are opportunities galore to expand your career based on where your interests lie. We're not afraid to pivot based on market conditions - you will always have the opportunity to stay ahead of the curve and do your best work here.
• Have fun with us. Celebrations. Socials. Sports teams. Access to sailing and yacht events.
• We value your well-being - enjoy an additional paid wellbeing day every year, free gym membership, corporate dental plan and weekly massages in the office.
• Work in a new, beautiful office space – with a catered lunch and breakfast every week, fully stocked kitchen and an on-site barista.
• Access to LEAP Home - a program unique to LEAP to support you in buying your primary residence.

#LI-AE1