Information Security Lead - Cloud, PCI & IR

Guzman y Gomez; Sydney; Hybrid; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Restricted shares

Annual leave 5 weeks

Paid parental leave

Hybrid work environment

Office in Surry Hills

Job summary

Guzman y Gomez information security leader seeks to own the security programme across cloud-hosted platforms, loyalty and payment systems, and a largely franchise network. You’ll drive governance, risk, and incident response with a hands-on security role and a small team.

Reporting to the Head of Technology Services, the role blends hands-on security engineering with strategic oversight, PCI DSS coordination and security awareness training within a fast-growing restaurant business.

Qualifications

• Experience in information security management including risk assessment and policy development.
• In-depth knowledge of security frameworks (ACSC Essential Eight, ISO 27001, NIST CSF).
• Hands-on security for cloud workloads (AWS) and identity platforms.

Responsibilities

• Develop, implement and maintain information security programme across corporate systems and franchise network.
• Conduct risk and vulnerability assessments and manage incident response.
• Operate security tooling (firewalls, IDS/IPS, SIEM) and monitor cloud platforms.
• Lead digital fraud management and data breach notification processes.
• Coordinate PCI DSS assessments and external penetration testing.
• Deliver security awareness training and manage third-party assessments.
• Lead and develop the Information Security team (1 direct report).
• Drive AI-informed security practices and secure AI systems.

Skills

Information security management

Risk assessment

Policy development

Incident response

Security operations

Cloud security

Education

Bachelor's degree in Computer Science/Information Technology or related field

Tools

AWS

Microsoft Entra ID

Okta

PCI DSS

Job description

Guzman y Gomez information security leader seeks to own the security programme across cloud-hosted platforms, loyalty and payment systems, and a largely franchise network. You’ll drive governance, risk, and incident response with a hands-on security role and a small team.

Reporting to the Head of Technology Services, the role blends hands-on security engineering with strategic oversight, PCI DSS coordination and security awareness training within a fast-growing restaurant business.