Location: Brisbane
Reporting to: Group Cyber Security Manager
Role objective: Safeguard the confidentiality, integrity, and availability of our client’s data and information systems by proactively addressing cyber security threats, mitigating risks, managing incident response and recovery operations, and continuously enhancing the organisation's cyber maturity and overall security posture.
Non-negotiable criteria for applicants: NV1 | Current firearms license (or the ability to attain one) Our client can arrange this | Unrestricted open driver’s license.
What we’re looking for: Someone who’s passionate, eager, driven, a Cyber enthusiast. Someone who lives and breathes all things cyber security, someone who loves learning, taking initiative, and enjoys thinking outside the box, rather than just going with the flow. We need a big thinker, a dreamer, someone who can’t help but coming up with new ideas and learning something new!
Key Responsibilities:
- Oversee day-to-day cyber operations for business units across Australia and New Zealand (AU/NZ) regions.
- Serve as the primary cyber point of contact for employees at all levels and external service providers, including the Managed Security Service Provider (MSSP).
- Lead the delivery of cyber awareness training across the business, continuously assessing its effectiveness and workforce cyber maturity for improvement.
- Ensure the Cyber Incident Response Plan (IRP) is always operationally ready and aligned with business needs.
- Contribute to IRP scenario testing with response team members, enhancing preparedness.
- Act as Incident Coordinator during cyber incidents, managing the operational response and collaborating with the Incident Manager to guide the organization’s recovery efforts.
- Conduct ongoing assurance activities to uphold operational cyber security standards.
- Collaborate with the Group Cyber Security Manager and System Administrators to achieve and maintain cyber compliance across regional businesses, including adherence to DISP, E8, ISO 27001, NIST 800-171, and CMMC standards.
- Partner with ICT technical teams to proactively identify and remediate vulnerabilities, continuously reducing cyber security risks.
- Maintain strong working relationships with international peers within the Business (e.g., Cyber Operations internationally) and external service providers.
- Support the development and implementation of internal cyber security strategies, policies, and procedures.
- Stay updated on key cyber security vendors and products, contributing to security architecture and planning.
- Provide cyber security advice to the business, assessing new systems, software, and services for risk, and recommend mitigating controls.
- Lead cyber security assessments for proposed technologies and services.
- Maintain relationships with Defence Industry Primes and represent the organisation at industry meetings and events.
- Prepare and deliver operational cyber reports for the Information Security Committee (ISC) and senior stakeholders.
- A bachelor's degree in computer science, information technology, cyber security, or a closely related discipline.
- Over 5 years of hands-on experience in cyber operations, with a focus on incident management and response.
- Professional certifications such as Certified Information Systems Security Professional (CISSP) or equivalent.
- Proven ability to design and deliver cyber awareness programs aimed at enhancing organizational security maturity and readiness.
- Strong track record in identifying, assessing, and mitigating cyber risks and threats within complex environments.
- Expertise in managing cyber security tools and services, such as SIEM, EDR, and VMS, with a particular focus on Microsoft technologies.
- Experience in assessing, selecting, and deploying cyber security solutions to strengthen organisational defences.
If this role has peaked your interested, and you meet the non-negotiable submission criteria – I would love to hear from you!
