Group Cyber Defence Strategy Lead

Qantas Group; Sydney; On-site; AUD 170,000 - 210,000; Full time

Benefits offered by this job

Air travel discounts

Flexible leave

Rewards program

Wellbeing app

Job summary

Qantas Group is seeking a Manager, Group Cyber Defence to lead threat evaluation, policy implementation, incident management, and risk intelligence across the group. Based in Sydney or Melbourne, you will shape cyber defence strategy and governance for the assigned controls.

You will build partnerships with business, technology teams and external vendors to strengthen resilience, align with regulatory and privacy requirements, and drive continuous improvement across security operations and

Qualifications

• At least five years’ experience in cyber security, information security or technology risk.
• Demonstrated experience owning and operating enterprise security platforms in BAU.
• Strong knowledge of API security, API gateways, authentication and OWASP API Security Top 10.

Responsibilities

• Shape the 1–3 year Cyber Defence strategy for assigned controls, aligning with broader Cyber strategy and business goals.
• Build partnerships across business, technology, vendors and peers to strengthen cyber resilience and support compliance.
• Govern Cyber Defence controls, risks, suppliers and performance, identifying cost-saving opportunities and improvements.
• Provide thought leadership through industry research and trend analysis, and communicate security needs clearly.

Skills

Akamai Kona Security

API Management

API Strategy

DNS Management

DNSSEC

OWASP Top 10

Cybersecurity

Information Security

Security Governance

Security Compliance

Stakeholder Management

Job description

Qantas Group is seeking a Manager, Group Cyber Defence to lead threat evaluation, policy implementation, incident management, and risk intelligence across the group. Based in Sydney or Melbourne, you will shape cyber defence strategy and governance for the assigned controls.

You will build partnerships with business, technology teams and external vendors to strengthen resilience, align with regulatory and privacy requirements, and drive continuous improvement across security operations and