Information Security Governance & Risk Lead

E2 Cyber; Australian Capital Territory; On-site; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Leadership exposure

Mentor security professionals

Executive stakeholder engagement

Diverse enterprise environments

Canberra area focus

Job summary

E2 Cyber is seeking an Information Security Manager to lead governance, risk, and assurance across complex environments in Australia. The role blends strategic oversight with hands-on risk management and stakeholder engagement to strengthen cyber resilience and compliance.

You will work with business and technology leaders to embed security best practices, manage security programs, and drive continuous improvement across governance, risk, and operations.

Qualifications

• 7+ years in Information Security, Cyber Security, Risk Management, or GRC roles.
• Led security programs, teams, or MSSP services.
• Strong governance, risk assessment, and compliance knowledge.
• Developed and implemented security policies and controls.
• Knowledge of assurance, vulnerability, and incident management practices.
• Experience in large enterprise or managed services environments.
• Excellent stakeholder engagement with senior leaders.
• Strong analytical, problem-solving, and decision-making abilities.
• Exceptional written and verbal communication for executive reporting.
• Experience supporting audits and regulatory reviews.

Responsibilities

• Lead governance, risk, compliance, and assurance activities.
• Develop and improve security policies, standards, and controls.
• Conduct risk assessments and mitigate identified risks.
• Embed security-by-design with project teams and business stakeholders.
• Ensure regulatory and contractual compliance.
• Establish security reporting, metrics, and governance forums.
• Oversee security incident management and response.
• Coordinate audits, reviews, and remediation initiatives.
• Monitor threats, vulnerabilities, and trends to uplift security posture.
• Coach and mentor team members and promote security culture.
• Collaborate on continuous improvement and customer engagements.

Skills

Security governance

Risk management

Executive communication

Security program leadership

Vulnerability management

Incident management

Audits & compliance

Stakeholder engagement

Problem solving

Decision making

Education

CISSP

CISM

CRISC

ISO 27001 Lead Auditor/Implementer

Security certifications (ISA/ISM)

Tools

Azure

Microsoft Defender

Microsoft Sentinel

Microsoft 365 Security

Job description

E2 Cyber is seeking an Information Security Manager to lead governance, risk, and assurance across complex environments in Australia. The role blends strategic oversight with hands-on risk management and stakeholder engagement to strengthen cyber resilience and compliance.

You will work with business and technology leaders to embed security best practices, manage security programs, and drive continuous improvement across governance, risk, and operations.