Information Security Manager

Davidson

City of Melbourne

On-site

AUD 100,000 - 140,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Competitive package

Professional growth opportunities

Collaborative environment with CISO support

Job summary

A leading technology consultancy in Melbourne is seeking an experienced Information Security Manager to enhance security operations and manage the cybersecurity framework. The ideal candidate will have strong knowledge of security frameworks, incident management experience, and relevant certifications. This role offers collaborative working with a supportive CISO and opportunities for professional growth.

Qualifications

Strong technical and strategic knowledge across security frameworks, GRC, and operations.
Hands-on experience with incident management, risk assessments, and regulatory audits.
Experience managing security programs in APRA-regulated environments is highly desirable.

Responsibilities

Implement and manage the Cybersecurity Framework.
Lead delivery of the Information Security Business Plan.
Design and enforce policies, standards, and controls.
Manage security dashboards, KRIs/KPIs, and reporting.
Oversee incident response, third-party risk, and vendor management.

Skills

Technical knowledge of security frameworks

Incident management experience

Stakeholder management skills

Education

CISSP, CISM, CRISC, CISA, OSCP certifications

Job description

Overview

Join to apply for the Information Security Manager role at Davidson. Are you passionate about leading security operations and ensuring organisations stay resilient against cyber threats? We are seeking an Information Security Manager to take ownership of the delivery of our security program and managing day-to-day operations and vendor oversight. This role offers the opportunity to work closely with our CISO and Security Operations Specialist, while playing a pivotal part in strengthening our security posture and driving continuous improvement.

What You'll Do

Implement and manage the Cybersecurity Framework.
Lead delivery of the Information Security Business Plan.
Design and enforce policies, standards, and controls.
Manage security dashboards, KRIs/KPIs, and reporting.
Coordinate audits, penetration testing, and threat intelligence.
Oversee incident response, third-party risk, and vendor management.
Deliver awareness training and phishing exercises.
Optimise security budgets and maintain audit readiness.

What We're Looking For

Strong technical and strategic knowledge across security frameworks, GRC, and operations.
Hands-on experience with incident management, risk assessments, and regulatory audits.
Certifications such as CISSP, CISM, CRISC, CISA, OSCP, or equivalent.
Experience managing security programs in APRA-regulated environments is highly desirable.
Strong communication and stakeholder management skills.

About Us

Davidson Technology Consulting is a boutique, expert-driven business and technology consultancy on a mission to help organisations drive lasting change. We empower clients to build high-performing functions while leveraging our expertise to lead transformation and innovation.

Why Join Us