National CISO & Security Strategy Leader

Fynd; Adelaide; Hybrid; AUD 260,000 - 420,000; Full time

Benefits offered by this job

Executive exposure

Flexible hybrid work

National impact

Job summary

Australian Access Federation (AAF) is seeking a hands-on CISO to lead cyber security strategy, own the ISMS, and guide governance across a national research ecosystem. You’ll report to the CEO, engage with the Board, and shape security posture across universities, government and research institutions.

You’ll be responsible for maturing cyber capabilities, representing AAF at industry forums, and ensuring security enables innovation while managing risk.

Qualifications

• Experience leading cyber security, information security or cyber risk functions.
• Delivering or operating ISO 27001 Information Security Management Systems.
• Security governance, risk management and compliance frameworks.
• Cloud security (AWS and/or Microsoft environments).
• Incident response, business continuity and disaster recovery.

Responsibilities

• Develop and execute AAF's cyber security strategy and mature security capability.
• Own and continually improve ISO 27001 ISMS.
• Lead cyber governance, risk management, compliance and security assurance.
• Present cyber risk updates to the Executive Leadership Team, Audit & Risk Committee and Board.
• Lead incident response, business continuity and resilience initiatives.
• Provide security guidance across cloud platforms, enterprise systems, identity services and emerging tech.
• Mentor the Cyber Security Officer and collaborate with technical leaders.
• Represent AAF externally through industry groups and partnerships.
• Help strengthen cyber capability across higher education and research communities.

Skills

Cyber leadership

ISO 27001 ISMS

Governance & risk

Cloud security

Incident response

Executive reporting

Security strategy

Regulated environments

Tools

AWS

Azure

Job description

Australian Access Federation (AAF) is seeking a hands-on CISO to lead cyber security strategy, own the ISMS, and guide governance across a national research ecosystem. You’ll report to the CEO, engage with the Board, and shape security posture across universities, government and research institutions.

You’ll be responsible for maturing cyber capabilities, representing AAF at industry forums, and ensuring security enables innovation while managing risk.