Cyber Security Manager - Country Road Group

Country Road Group; Melbourne; On-site; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Bi-annual product allowance

Staff discounts across CRG brands (40%

Birthday and volunteer leave

Health and wellbeing support

Parental leave program

Internal career opportunities

Annual learning calendar

Community partnerships

Job summary

Country Road Group seeks an experienced Cyber Security Manager to lead operational and engineering capability, balancing hands-on security with leadership responsibilities. You’ll guide the cyber team, own security platforms like MDR/XDR/SIEM, and drive risk-based, practical controls across a complex enterprise.

You’ll collaborate with Risk, Governance and technology teams to translate threats into effective protection, while shaping architecture and vendor strategies in a fast-paced retail

Qualifications

• 5+ years’ experience in Cyber Security, with a strong technical background across security operations, engineering and/or architecture.
• Hands-on with cyber security technology, with progression into a lead/manager/senior technical role.
• Strong knowledge of security architecture and engineering across network, cloud, endpoint/EDR and IAM.
• Experience designing or maturing security tooling and controls such as MDR, XDR, SIEM and vulnerability management.
• Strong incident response capability including investigation, playbooks and leading significant incidents.
• Solutions-focused mindset translating technical risks into practical controls.
• Demonstrated ability to lead and mentor cyber security professionals.
• Strong vendor management including service performance, SLAs, licensing and costs.
• Ability to translate complex technical risks into clear business recommendations for senior stakeholders.
• Knowledge of ISO/IEC 27001/2, NIST, CIS, MITRE ATT&CK; cyber security or cloud certifications welcomed.
• Tertiary qualifications in related fields; retail/PCI-DSS exposure advantageous.

Responsibilities

• Lead, mentor and develop the cyber security team across triage, investigation and response to incidents.
• Own architecture and engineering roadmap for core security platforms (MDR, XDR, SIEM, vulnerability management, email security, cloud security).
• Develop and improve incident response plans and playbooks; lead during major security incidents.
• Improve detection and response capability in partnership with outsourced MDR provider.
• Design and implement scalable security controls and reference architectures across CRG’s technology environment.
• Own security vulnerabilities and risks; work with tech teams to implement solutions.
• Manage key security vendors and partners including performance, SLAs, licensing and delivery.
• Conduct IT security risk assessments and translate findings for senior leaders.
• Partner with technology teams on security architecture decisions and cyber risk trade-offs.
• Collaborate with Risk & Governance on PCI-DSS and ensure controls meet requirements.
• Maintain knowledge of cyber threat landscape and opportunities to strengthen security posture.

Skills

Cyber security

Security operations

Security engineering

Security architecture

Incident response

Vendor management

Stakeholder influence

Network security

Cloud security

Endpoint/EDR

IAM

Education

Tertiary qualifications in Cyber Security, Computer Science, IT or related

Tools

MDR

XDR

SIEM

Vulnerability management

Email security

Job description

At Country Road Group, our Group Functions sit at the heart of our business, driving the success of our portfolio of distinctive brands and enabling them to do what they do best. Working across the business, you will play a vital role in shaping how we operate, grow, and innovate, bringing our strategy to life.

As the Cyber Security Manager, you will lead the cyber operational and engineering capability that protects Country Road Group’s systems and data. Reporting directly to the Head of IT: Enabling Platforms & Operations, you will lead our Cyber Security Analyst and Engineer, oversee security monitoring and incident response, and own the architecture and engineering roadmap for our core security controls and platforms.

This is a hands‑on, solutions‑focused cyber leadership role. We are looking for someone with a strong technical foundation in cyber security who has built their career through security operations, engineering or architecture and is now ready to combine that technical expertise with people leadership, vendor management and broader business influence. You will be comfortable getting into the technical detail, taking ownership of security challenges and working within a complex and fast‑paced environment to turn cyber risks into practical solutions.

How You Will Contribute

• Lead, mentor and develop our cyber security team, overseeing the triage, investigation and response to security incidents and alerts
• Own the architecture and engineering roadmap for core security platforms, including MDR, XDR, SIEM, vulnerability management, email security and cloud security
• Develop and continuously improve incident response plans and playbooks, taking the lead during significant security incidents
• Drive improvements to detection and response capability in partnership with our outsourced MDR provider
• Design and implement scalable security controls and reference architectures across CRG’s evolving technology environment
• Take ownership of security vulnerabilities and technical risks, working with technology teams to develop and implement practical solutions
• Manage key security vendors and technology partners across performance, SLA’s, licensing, costs and ongoing service delivery
• Conduct IT security risk assessments and translate technical findings into clear, actionable recommendations for senior business leaders
• Partner with technology teams and senior stakeholders on security architecture, engineering decisions, technical trade‑offs and cyber risk
• Partner with Risk & Governance teams on requirements such as PCI‑DSS, ensuring compliance requirements translate into effective technical controls
• Maintain current knowledge of the cyber threat landscape and emerging technologies, continuously identifying opportunities to strengthen CRG’s security posture.

Capabilities We Value

• 5+ years’ experience in Cyber Security, with a strong technical background across security operations, engineering and/or architecture
• Demonstrated career experience working hands‑on with cyber security technology, with subsequent progression into a lead, manager or senior technical role
• Strong knowledge of security architecture and engineering across areas such as network security, cloud security, endpoint/EDR and identity and access management
• Experience designing, implementing or maturing security tooling and controls such as MDR, XDR, SIEM and vulnerability management
• Strong incident response capability, including investigating security events, developing response playbooks and leading the resolution of significant incidents
• A solutions‑focused mindset with the ability to move beyond identifying risk to designing and implementing practical solutions
• Demonstrated ability to lead, mentor and develop technical cyber security professionals
• Strong vendor management capability, including experience managing technology partners, service performance, SLA’s, licensing and commercial considerations
• Ability to translate complex technical risks into clear, business‑relevant recommendations and influence senior stakeholders
• Working knowledge of frameworks such as ISO/IEC 27001/2, NIST, CIS and MITRE ATT&CK, with relevant cyber security or cloud certifications highly regarded
• Tertiary qualifications in Cyber Security, Computer Science, Information Technology, Engineering or a related discipline
• Retail experience and exposure to PCI‑DSS would be advantageous, however we welcome experienced cyber security professionals from other complex technology environments.

What We Offer

• Bi-annual product allowance, access to sample sales and 40% discount for you and your immediate family across all CRG brands
• Flex your leave your way, including birthday leave, volunteer leave, personal leave and more
• Access to health and wellbeing support, including Health Insurance, 24/7 EAP counselling, discounted gym memberships and financial advice services
• 18 weeks paid parental leave program for eligible employees with return‑to‑work clothing allowance
• Internal career opportunities across our brands
• Annual learning calendar to support your ongoing development
• Support impactful community and charity partnerships across our brands, including OCRF, Our Watch, First Nations Reconciliation, Movember, Red Cross and Landcare.

Who We Are

Country Road Group is a design‑led portfolio of premium fashion brands, comprising five iconic labels: Country Road, Mimco, Trenery, Witchery and Politix. Each brand has its own story, and together they hold a market‑leading position in the mid to upper tier of Australia’s specialty fashion segment with a focus on delivering our ambition to build a portfolio of distinctive brands that drive sustainable growth. Country Road Group is part of Woolworths Holdings Limited (South Africa), a leading Southern Hemisphere retail group.

We encourage you to explore our Current Opportunities and we look forward to connecting with you!

Country Road Group acknowledges the Traditional Owners of Country throughout Australia and recognises their continuing connection to lands, waters and communities. We pay our respects to Aboriginal and Torres Strait Islander cultures and to Elders past and present.

We’re committed to inclusion and accessibility. If we can support you with any adjustments at any stage, please let us know.