Head of Information Security

Talent; City of Melbourne; On-site; AUD 200,000 - 260,000; Full time

Job summary

Talent is seeking a Head of Information Security in Melbourne to strengthen security operations, manage cyber risk, and shape the security roadmap for a large organisation. This hands-on leadership role offers broad influence across technology and business teams.

You'll lead incident response, maintain security policies and risk reporting, and provide practical security guidance to technology teams and senior stakeholders across on-premise and cloud environments.

Qualifications

• 10+ years in information security across ops, risk and governance.
• Strong incident management experience with proactive handling.
• Experience in technology governance forums and challenging changes when needed.
• Knowledge of ISO 27001 or NIST frameworks.

Responsibilities

• Lead incident response with analysts, networks, and providers.
• Use incident playbooks to assess issues, coordinate action, inform stakeholders.
• Review projects and designs, challenge security risks.
• Maintain security policies, controls, and risk reporting incl. ISO 27001.
• Improve monitoring and controls across cloud, identity, endpoint, data protection.
• Provide practical security advice to tech teams and senior stakeholders.

Skills

Information security

Incident management

Security governance

Security operations

Cross-functional collaboration

Stakeholder communication

Tools

Microsoft security tools

SIEM

Vulnerability management

Cloud security tooling

Job description

• Join a large organisation in the construction and property industry
• Help improve security across the business

About the role:

We're looking for a Head of Information Security to strengthen security operations, manage cyber risk and help shape the security roadmap for a large organisation. This is a hands on leadership role with broad influence across technology and business teams.

What you'll do:

• Lead the response to security incidents, working with security analysts, network teams and external providers.
• Use incident processes and playbooks to assess issues, coordinate action and keep stakeholders informed.
• Review projects, designs and proposed changes, challenging decisions where security risks have not been addressed.
• Maintain security policies, controls and risk reporting, including those supporting ISO 27001.
• Improve security monitoring and controls across cloud, identity, endpoint and data protection.
• Provide practical security advice to technology teams and senior stakeholders.

What you'll bring:

• At least 10 years' experience in information security, with broad experience across security operations, risk and governance.
• Strong incident management experience, including handling issues before they escape.
• Experience contributing to technology governance forums and the confidence to challenge proposed changes when needed.
• Practical knowledge of ISO 27001, NIST or similar security frameworks.
• Experience with Microsoft security tools, SIEM, vulnerability management and cloud security.