Head of Information Security

ExecThread, Inc.; City of Melbourne; On-site; AUD 180,000 - 260,000; Full time

Job summary

ExecThread, Inc. in Melbourne seeks a Head of Information Security to lead security operations, manage cyber risk, and influence the security roadmap.

This hands-on leadership role partners with security analysts, network teams and external providers to strengthen the organization’s security posture. The ideal candidate has 10+ years in information security, strong incident management, and practical experience with ISO 27001, NIST, and cloud security.

Qualifications

• Minimum of 10 years in information security.
• Strong background in security operations, risk and governance.
• Experience reviewing projects and changes for security implications.
• Proven ability to lead incident response and coordinate with multiple teams.

Responsibilities

• Lead incident response and manage security incidents from detection to remediation.
• Review designs, changes and projects to ensure security risks are addressed.
• Maintain security policies, controls and risk reporting including ISO 27001.
• Provide practical security guidance to technology teams and senior stakeholders.
• Drive security roadmap and engagement with external providers.

Skills

Information security leadership

Incident management

Security operations

Risk and governance

Stakeholder communication

Tools

SIEM

Vulnerability management

Cloud security

Job description

The Company is seeking a Head of Information Security to play a pivotal role in enhancing the security posture of the business. This hands-on leadership position is focused on strengthening security operations, managing cyber risk, and influencing the security roadmap. The successful candidate will be responsible for leading the response to security incidents, working closely with security analysts, network teams, and external providers.

They will also be tasked with using incident processes and playbooks to assess issues, coordinate actions, and keep stakeholders informed. A key aspect of the role is to review projects, designs, and proposed changes, ensuring that security risks are adequately addressed, and to maintain security policies, controls, and risk reporting, including those supporting ISO 27001. Applicants for the Head of Information Security role at the company should have a minimum of 10 years' experience in information security, with a strong background in security operations, risk, and governance.

The role requires a candidate with robust incident management experience and the ability to handle issues before they escalapte. Practical knowledge of security frameworks such as ISO 27001, NIST, or similar is essential, as is experience with security tools, SIEM, vulnerability management, and cloud security. The ideal candidate will have a proven track record of providing practical security advice to technology teams and senior stakeholders and will be confident in challenging proposed changes to ensure security is not compromised.

Functions:

• Information Technology

Large organisation in the construction and property industry.