Information Security Architect

HESTA; City of Melbourne; On-site; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Additional leave

PD funding

Health programs

Superannuation support

Job summary

HESTA is seeking an experienced Security Architect to shape our security architecture and embed Secure-by-Design and Zero Trust across the organisation. You will advise on technology, data and cloud initiatives, helping teams design secure solutions while enabling safe adoption of AI/ML, cloud, SaaS and modern development practices.

Join a maturing security environment where you can influence architecture, uplift capability and make a meaningful impact in a highly regulated superannuation

Qualifications

• Experience in security architecture within cloud-first environments.
• Embed Secure-by-Design and Zero Trust into delivery.
• Experience with cloud security architecture (AWS/Azure/GCP).
• Threat modelling and architecture reviews experience.
• Knowledge of NIST CSF, ISO 27001, APRA CPS 234/CPS 230.
• Experience in financial services or regulated environments.

Responsibilities

• Develop and evolve Enterprise Security Architecture Framework.
• Define security standards and reference architectures.
• Provide security architecture advice across initiatives.
• Conduct architecture reviews and threat modelling.
• Provide specialist expertise across AWS, Azure and/or GCP.
• Embed security into SDLC, DevOps, CI/CD and cloud delivery.
• Enable secure adoption of AI/ML, SaaS, containers and serverless technologies.
• Partner with Technology and Risk teams to strengthen security culture.

Skills

Security architecture

Cloud security

Threat modelling

Zero Trust

Secure-by-Design

AWS/Azure/GCP

Regulatory compliance

Education

Cybersecurity certifications

Job description

Join HESTA’s growing Information Security/Cybersecurity team and play a key role in shaping our security architecture capability and embedding Secure-by-Design and Zero Trust principles across the organisation. Reporting to the Information Security Architecture, Strategy & Engineering Manager, you’ll provide expert security architecture advice across technology, digital, data and cloud initiatives – helping teams design secure solutions while enabling the safe adoption of emerging technologies, including AI/ML, cloud, SaaS and modern development practices.

This is an opportunity to join a maturing security environment where you can influence architecture, uplift capability and make a meaningful impact in a highly regulated industry.

What You’ll Do

• Develop and evolve HESTA’s Enterprise Security Architecture Framework, aligned to NIST, ISO 27001, APRA CPS 234 and relevant Australian security standards.
• Define security standards, reference architectures, control baselines and reusable patterns across applications, data and infrastructure.
• Provide security architecture advice and challenge solution designs across major technology and digital initiatives.
• Conduct architecture reviews and threat modelling, identifying risks and recommending practical controls and mitigations.
• Provide specialist expertise across AWS, Azure and/or GCP, including IAM, encryption, network security, logging and cloud security posture.
• Embed security into SDLC, DevOps, CI/CD and cloud delivery through practical guardrails and review gates.
• Enable the secure adoption of AI/ML, SaaS, containers and serverless technologies, including appropriate AI security controls.
• Partner with Technology, Enterprise Architecture, Risk, Compliance, Digital and business teams to strengthen security capability and culture.

What You’ll Bring

• Demonstrated experience in security architecture within complex, cloud-first environments.
• Strong experience embedding Secure-by-Design, Zero Trust and security controls into technology delivery.
• Expertise across cloud security architecture, ideally AWS, Azure and/or GCP.
• Experience with threat modelling, architecture reviews, security assessments and assurance.
• Understanding of securing AI/ML and emerging technologies, including AI guardrails and model protection.
• Strong knowledge of NIST CSF, ISO 27001, CIS, APRA CPS 234/CPS 230 and Australian privacy requirements.
• Experience in financial services, superannuation or another regulated environment is highly regarded.
• Relevant cybersecurity, IT or Computer Science qualifications and industry certifications are advantageous.

If you’re an experienced security architect who enjoys solving complex problems, influencing technology decisions and building security into the future – we’d love to hear from you –

Benefits that matter and make a difference for our employees

• Leave for those moments that matter , an additional 6 days of leave at the end of year, up to 6 days paid volunteer leave, gender neutral paid parental leave of 20 weeks, Gender Affiliation leave, reproductive health and wellbeing leave, Cultural and Ceremonial leave. Access your LSL after 3 years, take AL at half pay, and purchase up to 2 weeks additional leave (just to name a few).
• Your professional development matters , up to $5,000 per year professional development and up to 8 days professional development leave, HESTA scholarships and free access to a range of premium learning tools.
• Your health and wellbeing matters , free annual flu shots and skin checks, incredible social events throughout the year and a comprehensive employee assistance program available 24/7.
• Your financial wellbeing matters , up to 15% super, financial planning support, end of year payment for all Enterprise Agreement-covered employees, incentivised Employee Referral Program and novated lease options.

We celebrate, value and include people of all backgrounds, genders, identities, cultures and abilities. We welcome and support applications from First Nations people, physically, neuro or culturally diverse, LGBTQI+, and people of any age. We are proud to be WGEA accredited as an Employer of Choice for Gender Equity.

We want all candidates to feel safe, included and provided with the best opportunity to thrive, if you require reasonable adjustments during your application or throughout the recruitment process, please reach out to a member of the Talent team [e-mail] and we’ll call you to discuss.