Cybersecurity Lead

• Define and own the group's cybersecurity strategy, maturity roadmap and investment priorities
• Set security standards for IT, regional providers and managed service providers
• Own the cyber risk register, control framework and Essential Eight maturity programme
• Drive measurable improvement toward target maturity and report security posture and risk to executives and the board
• Define security architecture principles across identity, endpoint, network, cloud and corporate IT/OT boundaries
• Embed security into environment design and change governance
• Own the incident response framework and lead major-incident response
• Coordinate the analyst, Arctic Wolf, IT teams and the business during incidents
• Lead post-incident reviews and resulting improvements
• Set and assure security requirements for managed service providers and regional providers
• Assess and reduce operational technology and plant-network risk
• Own the security toolset relationship and roadmap, including Microsoft Defender and Arctic Wolf
• Advise on security implications of major programmes, including the D365 rollout
• Lead and develop the IT Security Analyst
• Build security awareness and improve organisational security maturity and culture
• Lead a two-person security function while maintaining separation between strategic security direction and day-to-day execution

• Significant experience in a senior cybersecurity role—security manager, lead, or equivalent—owning strategy, governance and risk, not solely operations
• 8+ years in cybersecurity, with several years in a leadership or strategic capacity
• Proven ownership of a security framework and maturity programme (Essential Eight, NIST, ISO 27001 or equivalent)
• Track record of measurable improvement and executive or board reporting
• Strong grounding in securing Microsoft enterprise environments, including Defender, Entra ID and Microsoft 365
• Experience working with a managed SOC or MDR provider such as Arctic Wolf
• Experience managing cyber risk across a complex, multi-site or multi-country organisation
• Ability to prioritise risk against business reality
• Capability to face executives, auditors and the business, translating technical risk into decisions
• Ability to hold a security standard against operational pressure
• Experience of, or genuine appetite for, operational technology (OT) and industrial environment security
• Manufacturing, industrial or critical-infrastructure security experience (desirable)
• Senior security certifications such as CISSP or CISM (desirable)
• Experience leading security through a major transformation or ERP programme (desirable)
• Familiarity with ITSM-embedded security operations such as Freshservice (desirable)

• Work from home
• Mon - Fri 7:00 AM – 4:00 PM PHT (adjustments will be made for daylight saving time)
• HMO with 2 free dependents and medical reimbursements
• Government-mandated benefits
• Opportunities to work with leading companies in Australia and beyond
• Training programmes for career development
• Engaging company outings, team activities and wellness sessions
• Supportive, inclusive culture
• Dedicated managers focused on your growth and success
• Competitive pay and benefits
• Additional entitlements
• Structured career development programs
• People-first culture focused on stability, growth and employee care