Senior Information Security Lead: Strategy, IAM & SOC

Sanitarium-Health-Food-Company; Central Coast; On-site; AUD 180,000 - 240,000; Full time

Benefits offered by this job

On-site gym access

Wellbeing program

Job summary

Sanitarium is seeking an Information Security Lead to take the reins of cyber security across our Australian and New Zealand operations. This senior, hands-on role will shape security strategy, lead a specialist team, and drive capabilities across a 24/7 environment including identity, access management, security operations, incident response and information protection.

You will influence senior stakeholders, set security governance, and advance resilience through governance, risk management and

Qualifications

• 8–10+ years in cyber or information security.
• Leadership experience in a security environment.
• Strong expertise across identity, access management, PAM and security operations.
• Experience with ISO 27001 and cyber risk frameworks.
• Strong incident response, vulnerability and threat management capabilities.
• Ability to influence senior stakeholders and translate security risks into business decisions.

Responsibilities

• Lead our cyber security strategy and roadmap.
• Lead and develop our Information Security team.
• Strengthen identity, Conditional Access and Privileged Access Management.
• Lead security operations, SIEM, threat detection and incident response.
• Drive vulnerability management and information protection.
• Strengthen governance aligned with ISO 27001 and Essential Eight.
• Partner with senior leaders to manage cyber risk and build resilience.

Skills

Identity access management

Privileged access management

Security operations

ISO 27001

Incident response

Job description

Sanitarium is seeking an Information Security Lead to take the reins of cyber security across our Australian and New Zealand operations. This senior, hands-on role will shape security strategy, lead a specialist team, and drive capabilities across a 24/7 environment including identity, access management, security operations, incident response and information protection.

You will influence senior stakeholders, set security governance, and advance resilience through governance, risk management and