Principal Cybersecurity Architect

Wesfarmers Health; City of Melbourne; On-site; AUD 180,000 - 280,000; Full time

Benefits offered by this job

Employee discounts across Wesfarmers

Professional development opportunities

Novated leasing options

Employee Assistance Program (EAP)

Job summary

Wesfarmers Health in Melbourne is seeking a Principal Cybersecurity Architect to define and lead the enterprise security strategy across brands, shaping the security vision and influencing major technology investments.

You will partner with technology and business leaders to embed secure, scalable solutions, apply Zero Trust and CI/CD practices, and drive security-by-design across large transformation programs.

Qualifications

• Minimum 5 years' experience in cybersecurity architecture, defining and owning enterprise security strategy, standards and reference architectures.
• Deep expertise in enterprise security frameworks and standards—NIST Cybersecurity Framework, ISO 27001 and ACSC Essential Eight.
• Strong knowledge of modern security architecture including Zero Trust, IAM, encryption, network, cloud and cloud-native patterns.
• Hands-on experience embedding security-by-design into large-scale transformation programs with agile, DevSecOps and CI/CD delivery environments.

Responsibilities

• Define and own the enterprise cybersecurity architecture and future-state security roadmap.
• Develop security architecture standards, frameworks and reference patterns.
• Embed security into major technology transformation programs and business initiatives.
• Conduct security architecture reviews and risk assessments; drive modern security practices including Zero Trust and DevSecOps.
• Provide security architecture guidance to technology and business stakeholders; influence strategy, roadmaps and investments.

Skills

Zero Trust

IAM

Encryption

Cloud security

CI/CD

Threat modelling

Security architecture

NIST CSF

ISO 27001

ACSC Essential Eight

Executive stakeholder engagement

Education

Post-secondary degree in IT/Cybersecurity or related discipline

Certifications: CISSP

Certifications: CISM

Certifications: TOGAF

Tools

SAS/SOC tools

Job description

About us:

At Wesfarmers Health we strive to make health, beauty and wellness experiences simpler, more affordable and easier to access for all Australians.

Our portfolio includes well-known names like Priceline, Australian Pharmaceutical Industries, as well as our MediAesthetics brands - Clear Skincare Clinics and SILK Laser Clinics. In the digital space, we’re proud to have SISU Health and InstantScripts—and most recently, we’ve launched our newest retail beauty stores, atomica.

About us:

What began in 1910 as a small co-operative of just three pharmacies has grown into Wesfarmers Health—a leading Australian organisation in health, beauty, and wellness.

Today, Wesfarmers Health proudly employs over 3,600 team members, all committed to delivering accessible, innovative, and trusted health and beauty services to Australians nationwide, across retail, medi-aesthetics, digital health, and wholesale and supply chain operations.

What you’ll do:

We are seeking an exceptional cybersecurity architecture leader to join our dynamic team as our Principal Cybersecurity Architect. In this pivotal role, you will define and lead the cybersecurity architecture strategy across all Wesfarmers Health brands, establishing the enterprise security vision and target state, influencing major technology investment decisions, and driving secure innovation across one of Australia's leading health, beauty and wellness organisations.

As our senior security architecture expert, you will work closely with technology and business leaders to ensure secure, scalable and compliant solutions are embedded across our evolving technology landscape while strengthening and enhancing our overall cybersecurity posture.

Key responsibilities include:

• Defining and owning the enterprise cybersecurity architecture and future-state security roadmap
• Developing security architecture standards, frameworks and reference patterns
• Embedding security into major technology transformation programs and business initiatives
• Conducting security architecture reviews and risk assessments
• Driving modern security practices including Zero Trust, DevSecOps and security automation
• Providing security architecture guidance to technology and business stakeholders
• Influencing cybersecurity strategy, technology roadmaps and investment decisions
• Supporting compliance with regulatory requirements and industry security frameworks
• Evaluating emerging security technologies, vendors and service providers
• Championing security-by-design principles across the organisation

What you’ll bring:

• Minimum 5 years' experience in cybersecurity architecture, including defining and owning enterprise security strategy, standards and reference architectures
• Deep expertise in enterprise security frameworks and standards — NIST Cybersecurity Framework, ISO 27001 and ACSC Essential Eight — and experience meeting compliance obligations in regulated environments
• Strong knowledge of modern security architecture, including Zero Trust, Identity and Access Management (IAM), encryption, network, cloud and cloud-native patterns, applied across infrastructure, applications and APIs
• Demonstrated experience embedding security-by-design into large-scale transformation programs, including agile, DevSecOps and CI/CD delivery environments
• Hands‑on experience in threat modelling, security assessments, architecture reviews and risk mitigation
• Experience evaluating cybersecurity technologies and working with security vendors and managed service providers
• Proven ability to influence and build trust with senior technology and business stakeholders, including at executive level

Also valued:

• SAP S/4HANA and SAP Business Technology Platform (BTP) security concepts
• Infrastructure as Code (IaC), policy as code and automated compliance frameworks
• Use of AI-enabled tooling to support architecture, documentation and standards development
• Tertiary qualification in Information Technology, Cybersecurity or a related discipline, or equivalent professional experience
• Industry-recognised certifications such as CISSP, CISM, SABSA or TOGAF

Why us?

• Access to employee benefits across Wesfarmers including team member discounts at Bunnings, Kmart, Target, Officeworks, OnePass, Priceline, atomica, InstantScripts and Clear Skincare Clinics
• Ongoing professional development and career opportunities across the Wesfarmers Health Division and the broader Wesfarmers Group
• Novated leasing options
• Access to our Employee Assistance Program (EAP) - available to all team members and their immediate family members, 24/7, 365 days a year
• Beautiful outdoor terrace for work and recreation
• Food, coffee and health & wellbeing facilities onsite including a landlord operated gym
• Dedicated end of trip facilities (cycle racks, showers, lockers)

Aboriginal and Torres Strait Islander Applicants

Wesfarmers Health aims to become an employer of choice for First Nations Australians, through investments that attract, empower and retain First Nations team members within our stores, distribution centres, clinics and corporate offices.

As part of the Wesfarmers group, we provide authentic support through a diverse range of programs and initiatives, designed to empower you on your journey towards personal achievement and professional advancement.

Copyright 2026 Australian Pharmaceutical Industries Pty. Ltd. ABN 57 000 004 320