Senior Security Manager

Jenny Barbour IT And Project Recruitment; Melbourne; On-site; AUD 180,000 - 250,000; Full time

Job summary

Jenny Barbour IT & Project Recruitment in Melbourne is seeking an experienced Senior Security Manager to lead a Security & Risk team and run day-to-day security operations for a leading national organisation. You will oversee a team of three, report to the Head of Security & Risk and ensure ongoing ISO 27001 compliance.

You will design and implement an AI-enabled security operations model, manage external providers, and communicate risk to the technology leadership.

Qualifications

• You have led a security operations, cyber security, technology risk or incident response team in a medium to large organisation.
• You have strong knowledge of incident response, vulnerability management, assurance and risk management.
• You have hands-on experience running an ISO/IEC 27001:2022 information security management system, including audits.
• You understand Australian security, privacy and regulatory requirements.
• You have experience with security platforms, managed service providers, automation and ideally AI-enabled operations.
• You can explain technical and risk issues in plain business language to senior leaders.
• You are a calm decision maker who knows when to act and when to.
• You hold a relevant tertiary qualification or industry certification (such as CISSP, CISM or CISA) or have equivalent practical experience.

Responsibilities

• Lead the daily running of the Security & Risk function, including priorities, workload, performance and escalations.
• Lead security operations and incident response, including investigations, threat hunting and intrusion analysis.
• Manage vulnerabilities from start to finish, working with technology teams to fix issues and keep clear evidence of the fixes.
• Run and improve the ISO 27001 information security management system, including audit preparation and corrective actions.
• Design and build an AI-enabled security operations model with clear human oversight.
• Manage external security providers, and support contract reviews, renewals and commercial discussions.
• Prepare clear reports for Technology Leadership, governance committees, auditors and clients.
• Coach and develop your team and build strong working relationships across the business.

Skills

Security operations

Incident response

Vulnerability management

Risk management

ISO 27001

Education

Tertiary qualification or industry certification (CISSP/CISM/CISA) or equivalent experience

Tools

Security platforms

Managed service providers

Automation

AI-enabled operations

Job description

• Permanent Role
• Leading National organisation
• Real influence

We are looking for an experienced Senior Security Manager to join a Security & Risk team in Melbourne. This is a senior operational role. You will be second-in-command to the Head of Security & Risk and run the day-to-day work of the security function so the Head can focus on strategy and long-term direction. You will lead a team of 3 and stand in for the Head of Security & Risk when needed.

About the role

• Lead the daily running of the Security & Risk function, including priorities, workload, performance and escalations.
• Lead security operations and incident response, including investigations, threat hunting and intrusion analysis.
• Manage vulnerabilities from start to finish, working with technology teams to fix issues and keep clear evidence of the fixes.
• Run and improve the ISO 27001 information security management system, including audit preparation and corrective actions.
• Design and build an AI-enabled security operations model with clear human oversight.
• Manage external security providers, and support contract reviews, renewals and commercial discussions.
• Prepare clear reports for Technology Leadership, governance committees, auditors and clients.
• Coach and develop your team and build strong working relationships across the business.

About you

• You have led a security operations, cyber security, technology risk or incident response team in a medium to large organisation.
• You have strong knowledge of incident response, vulnerability management, assurance and risk management.
• You have hands-on experience running an ISO/IEC 27001:2022 information security management system, including audits.
• You understand Australian security, privacy and regulatory requirements.
• You have experience with security platforms, managed service providers, automation and ideally AI-enabled operations.
• You can explain technical and risk issues in plain business language to senior leaders.
• You are a calm decision maker who knows when to act and when to.
• You hold a relevant tertiary qualification or industry certification (such as CISSP, CISM or CISA) or have equivalent practical experience.

Experience in a professional services or regulated environment is highly regarded.

Why apply

• A senior role with real influence and responsibility.
• Work closely with the Head of Security & Risk.
• Help shape how AI and automation are used in security operations.