Information Security Leader: Governance & Risk

E2 Cyber; Canberra; On-site; AUD 140,000 - 200,000; Full time

Job summary

E2 Cyber is seeking an Information Security Manager to lead governance, risk, compliance, and assurance across complex enterprise environments. You will drive security strategy, engage executives, and embed security best practices while mentoring a security-focused team.

You will partner with business and technology leaders to strengthen cyber resilience, manage risk, and ensure compliance across programs and vendors.

Qualifications

• 7+ years in Information Security, Cyber Security, Risk Management, or GRC roles.
• Proven experience leading security programs, teams, or managed security services.
• Strong governance, risk assessment, and compliance framework know-how.
• Experience building and implementing security policies, standards, and control frameworks.
• Knowledge of security assurance, vulnerability management, and incident management practices.

Responsibilities

• Lead the delivery of information security governance, risk management, compliance, and assurance activities.
• Develop, maintain, and improve security policies, standards, frameworks, and controls.
• Conduct security risk assessments and provide recommendations to mitigate identified risks.
• Partner with project teams to embed security-by-design principles.
• Ensure regulatory, contractual, and industry security requirements are met.
• Establish security reporting, metrics, dashboards, and governance forums.
• Lead security incident management and remediation activities.
• Coordinate audits, compliance reviews, and remediation initiatives.

Skills

Leadership

Stakeholder engagement

Security governance

Risk assessment

Executive reporting

Education

CISSP

CISM

CRISC

ISO 27001 Lead Auditor/Implementer

ITIL Foundation

Tools

Azure

Microsoft Defender

Microsoft Sentinel

Microsoft 365 Security

ITSM

Job description

E2 Cyber is seeking an Information Security Manager to lead governance, risk, compliance, and assurance across complex enterprise environments. You will drive security strategy, engage executives, and embed security best practices while mentoring a security-focused team.

You will partner with business and technology leaders to strengthen cyber resilience, manage risk, and ensure compliance across programs and vendors.