Security Operations Lead

Scyne Advisory; Melbourne; On-site; AUD 140,000 - 180,000; Full time

Benefits offered by this job

Market-leading parental leave

Flexible working

Additional leave options

Smart device reimbursement

Wellness & lifestyle benefits

Sonder digital care platform

Job summary

Scyne Advisory is seeking a Security Operations Lead to enable effective day-to-day cyber security operations and lead incident response, vulnerability management, and security monitoring across cloud, data, and AI platforms. You will partner with engineering and business teams to strengthen resilience and governance.

The role requires hands-on security operations leadership, familiarity with DevSecOps and security tooling, and the ability to communicate risks in business terms.

Qualifications

• Hands-on experience leading or coordinating security operations.
• Experience using Microsoft security tools for alert triage and monitoring.
• Experience with DevSecOps practices and CI/CD security tooling.
• Ability to translate incidents and vulnerabilities into simple business language.

Responsibilities

• Lead day-to-day security operations and incident handling.
• Monitor vulnerabilities and ensure timely remediation.
• Coordinate evidence collection for ISO 27001 audits and line-of-sight assurance activities.
• Embed security controls across cloud, data, software and AI security in development and CI/CD processes.
• Deliver operational reporting to the CISO on security posture and incidents.
• Foster cyber awareness and collaboration with Technology teams and business units.

Skills

Security operations

Incident response

SOC management

Vulnerability management

DevSecOps

CI/CD security

Cloud security

Threat detection

Security reporting

SOC/MSP management

Tools

Microsoft security tools

Job description

Scyne are public purpose specialists uniting people, ideas and potential to shape solutions.

Our vision is to be the public purpose specialists, supporting organisations to build more resilient, secure, equitable and prosperous communities. We strive to support a stronger Australia – one purpose, one practice.

We are an independent, contemporary, national business with the scale and capabilities to deliver meaningful impact for the public purpose; through serving the public sector, public purpose organisations or projects, and organisations operating in defined public purpose sectors.

We are setting a new standard for public purpose advisory services in Australia, with rigorous governance and accountability frameworks and standards and a clear commitment to ethical leadership. We are governed by a Board including an independent Chair, a staff appointed director and two additional non-executive independent directors alongside two directors from the majority shareholder.

Job Description

The Security Operations Lead is responsible for enabling effective day-to-day cyber security operations. The role leads operational activities across incident response, vulnerability management, security monitoring, provider management and control remediation while supporting the CISO and Technology teams to reduce cyber risk and improve operational resilience.

Key responsibilities:

• Security Operations & SOC Management:Lead day-to-day operations (alert triage, incident containment, runbook maintenance) and manage the operating rhythm, service levels, and escalation paths with the SOC/MSP.
• Vulnerability & Control Monitoring:Monitor key security controls across identity, endpoint, cloud, and networks; track and prioritize high-risk vulnerabilities, ensuring clear ownership and timely remediation.
• Cyber Risk, Governance & Audit Alignment:Maintain the operational risk register, coordinate evidence collection for ISO 27001, audit, and Line 1/2/3 assurance activities, and manage formal risk acceptance/exception workflows.
• Cloud, Data & AI Security Monitoring:Partner with Engineering, Technology and business stakeholders to embed and operationalise cloud, data, software and AI security controls across development and CI/CD processes, supporting monitoring, response and remediation activities for data security posture, misconfigurations, risky access, data exposure and other security risks while ensuring controls are practical, effective and integrated into day-to-day operations.
• Operational Reporting & CISO Advisory:Deliver clear operational reporting to the CISO on security posture, incident trends, vulnerability remediation progress, and third-party provider performance.
• Stakeholder Engagement & Capability Building:Partner closely with Technology teams and business units to embed workable security controls, lead cyber awareness/phishing initiatives, and foster shared ownership of cyber risks.

Qualifications

• Hands-on experience leading or coordinating security operations, incident response, SOC, vulnerability management, or cyber defence activities.
• Experience using Microsoft security tools or similar platforms for alert triage, investigation, monitoring, reporting, and control improvement.
• Hands-on experience with DevSecOps practices, CI/CD security tooling, and application security testing.
• Experience improving operational processes, runbooks, playbooks, dashboards, service levels, or security reporting.
• Strong understanding of incident response, threat detection, vulnerability management, identity security, endpoint security, cloud security, and security monitoring.
• Experience managing SOC/MSP providers, including performance reviews, escalations, incident quality, remediation follow-up, and SLA accountability.
• Ability to explain incidents, vulnerabilities, control gaps, and operational risks in simple business language.
• Working knowledge of common security frameworks and benchmarks, such as NIST CSF, CIS Controls, ISO 27001, Essential Eight, MITRE ATT&CK, or cloud security guidance.
• Experience supporting detection, monitoring, or response for cloud, data protection, insider risk, or AI security use cases.
• Relevant certifications, such as CISSP, CISM, SANS/GIAC, or cloud security certifications would be highly regarded.

Additional Information

• Market leading Parental Leave: Allows either carer to take 26 weeks of leave, flexibly, until a child is two years of age. A six-month minimum service requirement for new starters applies. We also make full superannuation contributions for up to 12 months (including unpaid parental leave).
• Flexible working: Our people have the autonomy to choose where and when they work so they can integrate their professional and personal lives, finding the right balance that fuels their growth, wellbeing, engagement and productivity. If it works for them, their teams, and their clients, it works for us.
• Additional leave: Includes Birthday leave, First Nations Cultural Leave, Floating Public Holidays, Leave+ (purchased leave up to 12 weeks), Study Leave, Volunteering Leave, and more!
• Smart device reimbursement: Working flexibly means accessing the information you need on the go. That’s why we help pay for your smartphone or tablet, claiming up to $60 a month towards your bill.
• Wellness and Lifestyle benefits: We’ll give you $295 a year to spend on items or activities that support your wellness, and up to $205 a year to support your balanced lifestyle.
• Sonder: A digital care platform that empowers people to actively take control of their wellbeing to live well and perform at their best, free to Scyne Employees and their immediate family members.

Interested in working together or want to find out more?

We champion a culture of diversity, equity, and inclusion, recognising that collective intelligence and varied perspectives are crucial for delivering exceptional outcomes for Australia's public sector. We actively encourage applications from individuals within marginalised and historically underrepresented communities. Please advise us if you require any adjustments during the application process.

We are deeply passionate about improving outcomes for First Peoples, collaborating with government and community sectors on programs focused on First Nations clients, consumers, and communities. We highly value the profound knowledge, insights, capabilities, strength, resilience, and cultural competence of First Peoples.

Our recruitment process is fair and inclusive, seeking a skilled and diverse workforce reflective of the communities we serve. We consider ability, performance, potential, and alignment with our values, valuing unique experiences and contributions. Background checks and, if required, valid Commonwealth security clearances are part of our process.

For recruitment partners, please note that candidate submissions from search firms and recruiters are only accepted in alignment with a pre-existing, signed agreement for a specific position. Unsolicited resumes will not incur financial obligation.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third‑party website where the third‑party website's terms and privacy policy apply