Information Security Architect

HESTA Super Fund; City of Melbourne; On-site; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Extra leave

Volunteer leave

Parental leave 20 weeks

Professional development

Health & wellbeing benefits

Superannuation support

Job summary

HESTA Super Fund is expanding its Information Security/Cybersecurity team to shape security architecture and embed Secure-by-Design and Zero Trust across the organisation. You will advise across technology, data, cloud initiatives and enable safe AI/ML adoption while aligning with Australian standards.

The role focuses on maturing security architecture, embedding capabilities, and influencing architecture decisions in a highly regulated environment.

Qualifications

• Experience delivering security architecture in cloud-first environments.
• Strong track record embedding Secure-by-Design and Zero Trust in delivery.
• Expertise across cloud security architecture (AWS, Azure, GCP).
• Experience with threat modelling, architecture reviews, and security assessments.

Responsibilities

• Develop and evolve the Enterprise Security Architecture Framework aligned to NIST, ISO 27001, APRA CPS 234.
• Define security standards, reference architectures, control baselines across apps, data and infra.
• Provide security architecture advice across major tech and digital initiatives.
• Conduct architecture reviews and threat modelling to identify risks and mitigations.
• Embed security into SDLC, DevOps, CI/CD and cloud delivery with guardrails.

Skills

Security architecture

Zero Trust

Cloud security

Threat modelling

AI security

AWS/Azure/GCP

Education

Cybersecurity/IT/CS degree

Tools

AWS

Azure

GCP

Job description

Bring your authentic and passionate self to this exceptional role #careerswithimpact

Join HESTA’s growing Information Security/Cybersecurity team and play a key role in shaping our security architecture capability and embedding Secure-by-Design and Zero Trust principles across the organisation. Reporting to the Information Security Architecture, Strategy & Engineering Manager, you’ll provide expert security architecture advice across technology, digital, data and cloud initiatives – helping teams design secure solutions while enabling the safe adoption of emerging technologies, including AI/ML, cloud, SaaS and modern development practices.

This is an opportunity to join a maturing security environment where you can influence architecture, uplift capability and make a meaningful impact in a highly regulated industry.

What You’ll Do

• Develop and evolve HESTA’s Enterprise Security Architecture Framework, aligned to NIST, ISO 27001, APRA CPS 234 and relevant Australian security standards.
• Define security standards, reference architectures, control baselines and reusable patterns across applications, data and infrastructure.
• Provide security architecture advice and challenge solution designs across major technology and digital initiatives.
• Conduct architecture reviews and threat modelling, identifying risks and recommending practical controls and mitigations.
• Provide specialist expertise across AWS, Azure and/or GCP, including IAM, encryption, network security, logging and cloud security posture.
• Embed security into SDLC, DevOps, CI/CD and cloud delivery through practical guardrails and review gates.
• Enable the secure adoption of AI/ML, SaaS, containers and serverless technologies, including appropriate AI security controls.
• Partner with Technology, Enterprise Architecture, Risk, Compliance, Digital and business teams to strengthen security capability and culture.

What You’ll Bring

• Demonstrated experience in security architecture within complex, cloud-first environments.
• Strong experience embedding Secure-by-Design, Zero Trust and security controls into technology delivery.
• Expertise across cloud security architecture, ideally AWS, Azure and/or GCP.
• Experience with threat modelling, architecture reviews, security assessments and assurance.
• Understanding of securing AI/ML and emerging technologies, including AI guardrails and model protection.
• Strong knowledge of NIST CSF, ISO 27001, CIS, APRA CPS 234/CPS 230 and Australian privacy requirements.
• Experience in financial services, superannuation or another regulated environment is highly regarded.
• Relevant cybersecurity, IT or Computer Science qualifications and industry certifications are advantageous.

If you’re an experienced security architect who enjoys solving complex problems, influencing technology decisions and building security into the future – we’d love to hear from you –

Benefits that matter and make a difference for our employees

• Leave for those moments that matter, an additional 6 days of leave at the end of year, up to 6 days paid volunteer leave, gender neutral paid parental leave of 20 weeks, Gender Affimation leave, reproductive health and wellbeing leave, Cultural and Ceremonial leave. Access your LSL after 3 years, take AL at half pay, and purchase up to 2 weeks additional leave (just to name a few).
• Your professional development matters, up to $5,000 per year professional development and up to 8 days professional development leave, HESTA scholarships and free access to a range of premium learning tools.
• Your health and wellbeing matters, free annual flu shots and skin checks, incredible social events throughout the year and a comprehensive employee assistance program available 24/7.
• Your financial wellbeing matters, up to 15% super, financial planning support, end of year payment for all Enterprise Agreement-covered employees, incentivised Employee Referral Program and novated lease options.

We celebrate, value and include people of all backgrounds, genders, identities, cultures and abilities. We welcome and support applications from First Nations people, physically, neuro or culturally diverse, LGBTQI+, and people of any age. We are proud to be WGEA accredited as an Employer of Choice for Gender Equity.

We want all candidates to feel safe, included and provided with the best opportunity to thrive, if you require reasonable adjustments during your application or throughout the recruitment process, please reach out to a member of the Talent team *******@hesta.com.au and we’ll call you to discuss.

Please note: Applications via recruitment agencies will not be accepted for this position.

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad .