Information Security Manager

Jenny Barbour IT & Project Recruitment; City of Melbourne; Vor Ort; AUD 180.000 - 240.000; Vollzeit

Zusammenfassung

Jenny Barbour IT & Project Recruitment is representing a client in Melbourne seeking an experienced Information Security Operations Orchestration Manager to lead security operations and drive resilience and maturity.

The role spans security operations, incident response, governance, AI and automation, vendor management and executive stakeholder engagement, with direct responsibility for ISO/IEC 27001:2022 ISMS and audit readiness.

Qualifikationen

• Proven experience leading security operations and/or incident response within a medium to large corporate environment.
• Demonstrated experience directly managing and sustaining an ISO/IEC 27001:2022 ISMS, including audit preparation, evidence management and corrective actions.
• Strong understanding of security operations tooling, operating models and threat intelligence.
• Experience across incident response, vulnerability management, threat hunting and security investigations.
• Strong knowledge of ISO 27001, ACSC Essential Eight and relevant Australian privacy and security obligations.
• Experience managing security vendors and third-party service providers, including service performance and continuous improvement.
• Up-to-date knowledge of information security risk management, cybersecurity technologies, methodologies and emerging trends across business and technology environments.
• Excellent written and verbal communication skills, with the ability to effectively engage and influence technical and non-technical stakeholders at all levels.

Aufgaben

• Lead and oversee security operations including monitoring, incident response, vulnerability management, investigations and threat hunting.
• Own the end-to-end security operations lifecycle across detection, investigation, response and recovery.
• Orchestrate security analysts, automation platforms, AI-enabled capabilities and third-party security providers.
• Develop and maintain security playbooks, workflows, escalation paths and operating procedures.
• Lead the adoption of AI and automation across security operations, ensuring appropriate human oversight, governance and risk management.

Kenntnisse

Security operations

Incident response

Governance

AI & automation

Vendor management

Stakeholder engagement

Information security risk

ISO 27001

Tools

SIEM

Threat intelligence platforms

Jobbeschreibung

• Lead security operations, orchestration, AI & automation
• Own ISO/IEC 27001:2022 security operations and assurance

Our client is seeking an experienced Information Security Operations Orchestration Manager to lead security operations and drive initiatives that strengthen the organisation’s security posture, resilience and maturity.

This is an opportunity for a security professional who can operate comfortably across security operations, incident response, governance, AI and automation, vendor management and executive stakeholder engagement.

Key Skills & Responsibilities

• Lead and oversee security operations including monitoring, incident response, vulnerability management, investigations and threat hunting.


• Own the end-to-end security operations lifecycle across detection, investigation, response and recovery.


• Orchestrate security analysts, automation platforms, AI-enabled capabilities and third-party security providers.


• Develop and maintain security playbooks, workflows, escalation paths and operating procedures.


• Lead the adoption of AI and automation across security operations, ensuring appropriate human oversight, governance and risk management.


• Proven experience leading security operations and/or incident response within a medium to large corporate environment.


• Demonstrated experience directly managing and sustaining an ISO/IEC 27001:2022 ISMS, including audit preparation, evidence management and corrective actions.


• Strong understanding of security operations tooling, operating models and threat intelligence.


• Experience across incident response, vulnerability management, threat hunting and security investigations.


• Strong knowledge of ISO 27001, ACSC Essential Eight and relevant Australian privacy and security obligations.


• Experience managing security vendors and third-party service providers, including service performance and continuous improvement.


• Up-to-date knowledge of information security risk management, cybersecurity technologies, methodologies and emerging trends across business and technology environments.


• Excellent written and verbal communication skills, with the ability to effectively engage and influence technical and non-technical stakeholders at all levels.

As we receive a high volume of applications, we appreciate your understanding that we are unable to respond to individual enquiries. We kindly ask that you do not contact us directly regarding application status.

Thank you for taking the time to apply we truly appreciate your interest.