Manager Group Cyber Defence

Qantas Group; City of Melbourne; On-site; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Travel discounts and member benefits

Flexible leave options (18 weeks paid)

Rewards program and memberships

Salary packaging (vehicles, devices, &

Wellbeing program and apps

Job summary

Qantas seeks a Manager, Group Cyber Defence to lead security across the enterprise from Melbourne or Sydney. You will shape multi-year cyber defence strategy, govern controls and drive risk-based decisions that protect customers and operations.

You will build partnerships with technology teams, vendors and business units to enhance resilience, align with regulatory requirements, and continuously improve threat intelligence and security posture.

Qualifications

• At least five years’ experience in cyber security, information security or technology risk.
• Demonstrated experience owning and operating enterprise security platforms in a business-as-usual environment.
• Strong knowledge of API security, API gateways, authentication, API discovery and the OWASP API Security Top 10.
• Experience conducting cyber security and technology risk assessments and delivering security, risk and compliance activities.
• Working knowledge of DNS operations, DNSSEC architecture, key management and DNS-related threats.
• Experience developing and implementing security governance, policies, standards, procedures and control frameworks.
• Strong analytical and problem-solving skills, with the ability to translate technical risks into clear business impacts and recommendations.

Responsibilities

• Shape the 1–3 year Cyber Defence strategy for assigned controls, aligning priorities with the broader Cyber strategy, business goals and emerging technology opportunities.
• Build strong partnerships across business, technology, vendors and industry peers to strengthen cyber resilience and support regulatory, privacy and PCI DSS compliance.
• Govern Cyber Defence controls, risks, suppliers and performance while identifying opportunities to improve capability, business value and cost efficiency.
• Provide thought leadership through industry research, benchmarking and trend analysis, while building team capability and clearly communicating Qantas’ Cyber Defence needs.

Skills

Cyber security

Information security

Technology risk

API security

API gateways

DNS management

DNSSEC

OWASP Top 10

Security governance

Executive reporting

Tools

Akamai Kona Site Defender

API Management

DNS Management

DNSSEC

OWASP

Job description

• Parent Business Function: Digital, IT & Analytics
• Time Type: Full time
• Worker Sub-Type: Permanent

Company Description

Founded in the Queensland outback in 1920, Qantas has grown to be Australia’s largest regional, domestic, and international airline. Qantas has a range of subsidiary businesses that support the overall operations of the Group. The Qantas Group’s main business is the transportation of customers and freight using two complementary airline brands — Qantas and Jetstar — operating regional, domestic, and international services.

Job Description

• Become a part of our Qantas Group Cyber Defence Team
• Join an amazing team that values and prioritises cyber security!
• Permanent role based in Melbourne OR Sydney

At Qantas, we represent Australia to the world. Our diverse country is known for its unique spirit, mateship, and a can-do attitude. Together we’re strong and resilient, and we work hard to make sure we’re always at our best.

TheManager, Group Cyber Defence will drive and support the evaluation and management of ongoing threats to Qantas Group security through policy recommendation and implementation, incident management, and continuous risk intelligence improvement to strengthen security of the Qantas business and enhance effectiveness of particular security area.

You will develop and deliver support the development and sustainable delivery of Cyber & Technology Risk Management and control assurance strategy across the Group.

Responsibility’s including

• Shape the 1–3 year Cyber Defence strategy for assigned controls, aligning priorities with the broader Cyber strategy, business goals and emerging technology opportunities.
• Build strong partnerships across business, technology, vendors and industry peers to strengthen cyber resilience and support regulatory, privacy and PCI DSS compliance.
• Govern Cyber Defence controls, risks, suppliers and performance while identifying opportunities to improve capability, business value and cost efficiency.
• Provide thought leadership through industry research, benchmarking and trend analysis, while building team capability and clearly communicating Qantas’ Cyber Defence needs.

What you will bring

• At least five years’ experience in cyber security, information security or technology risk.
• Demonstrated experience owning and operating enterprise security platforms in a business-as-usual environment.
• Strong knowledge of API security, API gateways, authentication, API discovery and the OWASP API Security Top 10.
• Experience conducting cyber security and technology risk assessments and delivering security, risk and compliance activities.
• Working knowledge of DNS operations, DNSSEC architecture, key management and DNS-related threats.
• Experience developing and implementing security governance, policies, standards, procedures and control frameworks.
• Strong analytical and problem-solving skills, with the ability to translate technical risks into clear business impacts and recommendations.
• Require Skills: Akamai Kona Security, API Management, API Strategy, DNS Management, DNSSEC, Open Worldwide Application Security Project (OWASP), OWASP Top 10, Cybersecurity, Information Security, Security Compliance, Security Governance
• Excellent stakeholder management, influencing, advisory and communication skills, including executive-level reporting.
• Experience working in large, complex or regulated environments, such as aviation, financial services or critical infrastructure.
• AI based cyber threat experience and digital skills highly advantageous
• Desirable experience with Akamai Kona Site Defender and relevant frameworks and certifications, including NIST, ISO 27001, Essential Eight, SOCI, CISSP, CCSP or CISM.

Why Qantas?

You’ll join a team where creativity and passion are encouraged. Our people come together to allow us to dream big and deliver successfully.

There are many different opportunities across our team, which means you’ll be able to grow both personally and professionally at Qantas. Your development is a priority for us – so that you can maintain the high standards our customers have come to expect and can continue to develop over time. You’ll be supported from day 1 with on-the-job training and coaching as well as our formal training opportunities. While you may start in this role, we’ve got a great track record of supporting our people to take their career in so many different directions, the destinations are endless.

The Qantas employee benefits program offers amazing benefits that extend well beyond travel.

• We love to travel:Enjoy heavily discounted air travel within Australia and across the globe, both for you and your family and friends, as well as exclusive deals on accommodation and holidays.
• We have flexible leave options:Make use of leave and flexible working opportunities including 18 weeks paid parental leave and the option to purchase additional paid leave for eligible employees.
• We’ll give you access to thousands of rewards:Through our partnerships we can offer you discounts across shopping, food and wine, insurance, health and wellbeing, leisure and entertainment.You can also take advantage of our salary packaging program including motor vehicles, eligible portable electronic devices and professional memberships.
• We’ll support your wellbeing:Whether it’s learning to better support your own and others’ mental health, our interactive wellbeing app or your very own tailored nutrition plan.

Qantas is an equal opportunity employer committed to providing a working environment that embraces and values diversity and inclusion. By coming to work for us, you’ll be part of an organisation that encourages diversity, supports charities and environmental initiatives. We encourage Aboriginal and Torres Strait Islander, and people of all backgrounds to apply. If you have any support or access requirements, we encourage you to advise us at time of application. Your personal information will be kept confidential in compliance with relevant privacy legislation.

Please note: applications will only be considered for candidates who have the right to work in Australia / New Zealand without restriction or sponsorship.

Applications will close by the 21st of October