GM, Information Security (CISO)

AULFS Latitude Financial Services Australia Holdings Pty Ltd; Melbourne; Hybrid; AUD 220,000 - 350,000; Full time

Benefits offered by this job

Take 5 extra leave

Hybrid working

Latitude benefits & discounts

Job summary

Latitude Financial Services in Melbourne seeks a visionary Chief Information Security Officer to lead our information security strategy and governance, ensuring resilience while enabling innovative solutions. You’ll set multi-year roadmaps, oversee security architecture, incident response, identity and data protection, and report to the CRO and Board with evidence-based assurances.

You’ll partner with executives to translate risk into actionable investments, manage budgets and third‑party

Qualifications

• Significant leadership experience with accountability for enterprise security capabilities in a complex technology environment.
• Deep technical judgement across security architecture, engineering, operations, identity, cloud, application security, data protection and cyber resilience.
• Experience directing material cyber incidents, including technical investigation, containment, recovery and executive communication.
• A track record of delivering enterprise security improvements and validating control effectiveness through testing, threat‑informed analysis and independent assurance.
• The ability to explain technical risk and investment priorities clearly to executives and Boards.

Responsibilities

• Set cybersecurity strategy and multi-year roadmap aligned with business objectives and risk appetite.
• Oversee architecture, engineering standards, and control requirements across identity, cloud, applications, infrastructure and data.
• Lead cyber defence, incident leadership, containment, remediation and recovery efforts.
• Drive risk-based vulnerability remediation and strengthen privileged access controls.
• Ensure governance, third‑party security management and assurance through testing and independent review.
• Lead a high‑performing security function with budget, partner and vendor management.

Skills

Executive communication

Security architecture

Incident response

Leadership

Regulatory compliance

Vendor management

Risk management

AI governance

Job description

Melbourne, Victoria
Lead Latitude’s cybersecurity strategy, technical capability and resilience. Latitude is seeking a GM of Information Security (CISO) to lead our information and cybersecurity function, combining executive leadership with deep technical judgement. Reporting to the Chief Risk Officer, you’ll be accountable for Latitude’s cybersecurity strategy and overall security posture, providing evidence-based advice to the Executive Leadership Team and Board. As Latitude invests in technology and evolves its consumer lending proposition, you’ll shape the security capabilities that protect our customers, people and services while enabling innovation. The role spans strategy, governance and assurance, security operations, identity management, asset management and recovery, with a clear expectation: demonstrate that security investment mitigates risk and strengthens resilience.

The opportunity

You’ll set a prioritised, multi-year cybersecurity roadmap aligned with business objectives, technology strategy and risk appetite. You’ll remain technically engaged in critical decisions, challenge assumptions and ensure confidence in our controls is supported by testing and operational evidence.

Your priorities will include:

• Strategy and executive advice: establish clear security priorities and give executives and the Board a practical understanding of material exposures, investment choices and progress.


• Technical security leadership: set architecture principles, engineering standards and control requirements across identity, cloud, applications, infrastructure and data, embedding security into technology change.


• Cyber defence and incident leadership: lead detection, investigation and response capabilities, directing significant incidents through containment, remediation and recovery.


• Exposure reduction: drive risk‑based vulnerability remediation, stronger identity and privileged access controls, and measurable reductions in exploitable attack paths.


• Resilience and recovery: work with business and technology leaders to test whether critical services can withstand disruption and recover securely under realistic attack scenarios.


• Governance and emerging risk: maintain an effective Information Security Management System, strengthen third‑party security and establish proportionate controls for AI and emerging technologies.


• People and investment: develop a high‑performing security function and manage budgets, partners and specialist providers against clear capability and risk‑reduction outcomes.

You’ll also challenge risk acceptance decisions and escal…

The experience and judgement you’ll bring

We’re looking for a senior cybersecurity leader who can move confidently between Board discussions and complex technical decisions. You’ll bring credibility with technical teams, sound commercial judgement and calm, decisive leadership under pressure.

• Significant leadership experience with accountability for enterprise security capabilities in a complex technology environment.


• Deep technical judgement across security architecture, engineering, operations, identity, cloud, application security, data protection and cyber resilience.


• Experience directing material cyber incidents, including technical investigation, containment, recovery and executive communication.


• A track record of delivering enterprise security improvements and validating control effectiveness through testing, threat‑informed analysis and independent assurance.


• The ability to explain technical risk and investment priorities clearly to executives and Boards.


• Commercial discipline in investment prioritisation, business cases and management of vendors and managed services.


• Experience operating in a regulated, highly controlled or critical‑service environment.


• Australian financial services experience would be highly regarded, alongside familiarity with relevant regulatory requirements and frameworks, including APRA CPS 234 and CPS 230, the Australian Privacy Act, ASD Essentials, ISO 27001 and NIST CSF.


• Relevant qualifications and professional credentials, or equivalent practical experience, are also valued.


• You’ll use AI thoughtfully to improve analysis and team effectiveness, with appropriate security, privacy governance and human oversight.

Leadership at Latitude

You’ll join a collaborative, accountable and technically curious team that values constructive challenge, evidence‑based decisions and the willingness to address difficult risks directly.

Success will be measured through reduced material exposure, demonstrably effective controls, stronger detection and recovery capabilities, timely remediation of audit and regulatory findings, and clear returns from security investment.

More possibilities for you

We believe doing great work starts with feeling supported. We make it possible…

• To spend more time with your loved ones—with an extra week of paid leave each year through our Take 5 initiative.


• To enjoy greater flexibility— with a hybrid working model that combines working from home with connection in the office.


• To put your wellbeing first—with Sonder, a 24/7 support app for mental and physical wellbeing.


• To access financial benefits—with discounts on Latitude products and services.

Lead what’s next

If you bring the technical depth, executive judgement and leadership to strengthen Latitude’s security and resilience, we’d welcome your application. We make it possible—for our customers, our partners and our people.

Successful applicants will be required to complete background checks.

Why work at Latitude?

In addition to a great culture, challenging work and the chance to grow your career, Latitude also offers a comprehensive suite of employee benefits, designed to be as individual as each of our employees. From superannuation and short term incentives to flexible working policies and a comprehensive employee assistance program, there are Latitude benefits to support your working and personal life. Additionally, the 'Congratitude' recognition program exists to reinforce our spirit of teamwork and achievement, and have a little fun along the way.

Our values—Take Ownership, Pursue Excellence, Win Together and Create Tomorrow—guide how we lead, make decisions and work together.