Information Security Architect

HESTA Super; City of Melbourne; On-site; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Leave & time off programs

Professional development support

Health & wellbeing programs

Financial wellbeing & superannuation

Job summary

HESTA is seeking an experienced Security Architect to shape our security framework and embed Secure-by-Design and Zero Trust across our cloud-first landscape.

You will guide AWS/Azure/GCP security, threat modelling, and architecture reviews, enabling safe AI/ML adoption while maintaining financial services regulatory standards.

Join a mature security program that collaborates with Risk, Compliance and Digital teams and supports professional growth and employee wellbeing.

Qualifications

• Experience in security architecture within complex, cloud-first environments.
• Experience embedding Secure-by-Design, Zero Trust and security controls into technology delivery.
• Expertise across cloud security architecture (AWS/Azure/GCP).
• Threat modelling, architecture reviews and assurance experience.
• Understanding of securing AI/ML and emerging tech, including AI guardrails.

Responsibilities

• Develop and evolve HESTA’s Enterprise Security Architecture Framework aligned to NIST, ISO 27001, APRA CPS 234 and Australian standards.
• Define security standards, reference architectures, control baselines and reusable patterns across applications, data and infrastructure.
• Provide security architecture advice across major technology and digital initiatives.
• Embed security into SDLC, DevOps, CI/CD and cloud delivery through guardrails and gates.
• Partner with risk, compliance and business teams to strengthen security capability.

Skills

Security Architecture

Cloud Security

Threat Modelling

Zero Trust

IAM / Identity

AI/ML security

Regulatory Knowledge

Education

Cybersecurity/IT degree

Job description

Select how often (in days) to receive an alert:

Bring your authentic and passionate self to this exceptional role #careerswithimpact

Join HESTA’s growing Information Security/Cybersecurity team and play a key role in shaping our security architecture capability and embedding Secure-by-Design and Zero Trust principles across the organisation. Reporting to the Information Security Architecture, Strategy & Engineering Manager, you’ll provide expert security architecture advice across technology, digital, data and cloud initiatives – helping teams design secure solutions while enabling the safe adoption of emerging technologies, including AI/ML, cloud, SaaS and modern development practices.

This is an opportunity to join a maturing security environment where you can influence architecture, uplift capability and make a meaningful impact in a highly regulated industry.

What You’ll Do

• Develop and evolve HESTA’s Enterprise Security Architecture Framework, aligned to NIST, ISO 27001, APRA CPS 234 and relevant Australian security standards.
• Define security standards, reference architectures, control baselines and reusable patterns across applications, data and infrastructure.
• Provide security architecture advice and challenge solution designs across major technology and digital initiatives.
• Conduct architecture reviews and threat modelling, identifying risks and recommending practical controls and mitigations.
• Provide specialist expertise across AWS, Azure and/or GCP, including IAM, encryption, network security, logging and cloud security posture.
• Embed security into SDLC, DevOps, CI/CD and cloud delivery through practical guardrails and review gates.
• Enable the secure adoption of AI/ML, SaaS, containers and serverless technologies, including appropriate AI security controls.
• Partner with Technology, Enterprise Architecture, Risk, Compliance, Digital and business teams to strengthen security capability and culture.

What You’ll Bring

• Demonstrated experience in security architecture within complex, cloud-first environments.
• Strong experience embedding Secure-by-Design, Zero Trust and security controls into technology delivery.
• Expertise across cloud security architecture, ideally AWS, Azure and/or GCP.
• Experience with threat modelling, architecture reviews, security assessments and assurance.
• Understanding of securing AI/ML and emerging technologies, including AI guardrails and model protection.
• Strong knowledge of NIST CSF, ISO 27001, CIS, APRA CPS 234/CPS 230 and Australian privacy requirements.
• Experience in financial services, superannuation or another regulated environment is highly regarded.
• Relevant cybersecurity, IT or Computer Science qualifications and industry certifications are advantageous.

If you’re an experienced security architect who enjoys solving complex problems, influencing technology decisions and building security into the future – we’d love to hear from you –

Benefits that matter and make a difference for our employees

• Leave for those moments that matter, an additional 6 days of leave at the end of year, up to 6 days paid volunteer leave, gender neutral paid parental leave of 20 weeks, Gender Affimation leave, reproductive health and wellbeing leave, Cultural and Ceremonial leave. Access your LSL after 3 years, take AL at half pay, and purchase up to 2 weeks additional leave (just to name a few).
• Your professional development matters, up to $5,000 per year professional development and up to 8 days professional development leave, HESTA scholarships and free access to a range of premium learning tools.
• Your health and wellbeing matters, free annual flu shots and skin checks, incredible social events throughout the year and a comprehensive employee assistance program available 24/7.
• Your financial wellbeing matters, up to 15% super, financial planning support, end of year payment for all Enterprise Agreement-covered employees, incentivised Employee Referral Program and novated lease options.

We celebrate, value and include people of all backgrounds, genders, identities, cultures and abilities. We welcome and support applications from First Nations people, physically, neuro or culturally diverse, LGBTQI+, and people of any age. We are proud to be WGEA accredited as an Employer of Choice for Gender Equity.

We want all candidates to feel safe, included and provided with the best opportunity to thrive, if you require reasonable adjustments during your application or throughout the recruitment process, please reach out to a member of the Talent team [e-mail] and we’ll call you to discuss.

Please note: Applications via recruitment agencies will not be accepted for this position.

HESTA Superannuation Fund Number (SFN): 129638949. HESTA Australian Business Number (ABN): 64 971 749 321