Information Security Architect: Cloud & Zero Trust

HESTA Super; City of Melbourne; On-site; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Leave & time off programs

Professional development support

Health & wellbeing programs

Financial wellbeing & superannuation

Job summary

HESTA is seeking an experienced Security Architect to shape our security framework and embed Secure-by-Design and Zero Trust across our cloud-first landscape.

You will guide AWS/Azure/GCP security, threat modelling, and architecture reviews, enabling safe AI/ML adoption while maintaining financial services regulatory standards.

Join a mature security program that collaborates with Risk, Compliance and Digital teams and supports professional growth and employee wellbeing.

Qualifications

• Experience in security architecture within complex, cloud-first environments.
• Experience embedding Secure-by-Design, Zero Trust and security controls into technology delivery.
• Expertise across cloud security architecture (AWS/Azure/GCP).
• Threat modelling, architecture reviews and assurance experience.
• Understanding of securing AI/ML and emerging tech, including AI guardrails.

Responsibilities

• Develop and evolve HESTA’s Enterprise Security Architecture Framework aligned to NIST, ISO 27001, APRA CPS 234 and Australian standards.
• Define security standards, reference architectures, control baselines and reusable patterns across applications, data and infrastructure.
• Provide security architecture advice across major technology and digital initiatives.
• Embed security into SDLC, DevOps, CI/CD and cloud delivery through guardrails and gates.
• Partner with risk, compliance and business teams to strengthen security capability.

Skills

Security Architecture

Cloud Security

Threat Modelling

Zero Trust

IAM / Identity

AI/ML security

Regulatory Knowledge

Education

Cybersecurity/IT degree

Job description

HESTA is seeking an experienced Security Architect to shape our security framework and embed Secure-by-Design and Zero Trust across our cloud-first landscape.

You will guide AWS/Azure/GCP security, threat modelling, and architecture reviews, enabling safe AI/ML adoption while maintaining financial services regulatory standards.

Join a mature security program that collaborates with Risk, Compliance and Digital teams and supports professional growth and employee wellbeing.