Head of Cyber Security

Tattarang Pty Ltd; Western Australia; On-site; AUD 150,000 - 200,000; Full time

Job summary

A leading investment group in Australia is seeking a Head of Cyber Security to lead their Cyber Security Centre of Excellence. This role involves developing corporate cyber security strategies, managing security standards, and mentoring a high-performing team. The ideal candidate has over 5 years of cyber security experience, strong technical and GRC knowledge, and excellent communication skills. This position is based in Western Australia.

Qualifications

• 5+ years in cyber or information security, including leadership or senior specialist experience.
• Hands-on experience with ISO 27001, SOC 2, NIST CSF, Essential Eight, and Australian regulations.
• Proven ability to lead and mentor high-performing security teams.

Responsibilities

• Lead and evolve cyber security strategy and roadmap.
• Provide expert guidance across technology and business teams.
• Act as the escalation point for cyber incidents.

Skills

Cyber security leadership

Technical security operations

GRC frameworks

Cloud security (AWS, Azure, GCP)

Communication skills

Strategic thinking

Education

Relevant certifications (CISSP, CISM, GIAC)

Tools

ISO 27001

SOC 2

NIST CSF

Essential Eight

Identity platforms (Okta, Microsoft Entra ID)

Job description

Tattarang is one of Australia’s largest private investment groups and is owned by the Forrest family. Our investment portfolio spans across agri-food, energy, resources, property and lifestyle.

About the Role

The Head of Cyber Security is responsible for leading Tattarang’s Cyber Security Centre of Excellence, setting the company’s cyber security strategy and standards, and delivering against Tattarang’s cyber security roadmap and risk settings.

Working closely with internal technology stakeholders, business units, and leadership, the Head of Cyber Security ensures that security is embedded into technology decisions, aligned with regulatory obligations, and effectively communicated at all levels of the organisation.

What you will do

• Lead and evolve Tattarang’s cyber security strategy and roadmap.
• Provide expert guidance across technology and business teams to maintain a secure environment.
• Design and enhance security controls aligned with enterprise standards and regulatory requirements.
• Own and mature the organisation’s GRC function, including ISO 27001, SOC 2, NIST CSF, and Essential Eight.
• Act as the escalation point for cyber incidents and coordinate incident response and recovery.
• Partner with internal stakeholders on security architecture, tooling, and continuous improvement.
• Oversee cyber security vendors and service providers, ensuring performance and accountability.
• Monitor and report on key risk indicators and cyber metrics to leadership and the board.
• Drive security awareness and training programs across the organisation.
• Lead and develop a high-performing cyber security team across identity, endpoint, applications, and incident response.

About you

• 5+ years in cyber or information security, including leadership or senior specialist experience
• Strong grasp of both technical security operations and GRC frameworks
• Hands‑on experience with ISO 27001, SOC 2, NIST CSF, Essential Eight, and Australian regulations
• Familiar with cloud security (AWS, Azure, GCP), identity platforms (Okta, Microsoft Entra ID), and SOC governance
• Proven ability to lead and mentor high-performing security teams
• Excellent communicator—able to translate complex issues for diverse audiences
• Strategic thinker with strong decision‑making and problem‑solving skills
• Relevant certifications (e.g. CISSP, CISM, GIAC) highly regarded

Next Steps

Please attach your resume and a cover letter explaining why you interested in this opportunity.

Please note we reserve the right to close applications early should a suitable candidate be identified.

We are committed to protecting the privacy of your personal information. To understand how we do so, you can read our Privacy Policy here https://www.tattarang.com/privacy-policy/

Agency submissions will not be accepted at this time.