Chief Information Security Officer

• Own the full enterprise technology and security remit, including infrastructure, security, identity, applications, and workplace technology
• Lead and grow IT and Security Operations, Cloud Platform Engineering, and GRC
• Coach existing leaders, set technical standards, and build the required team while maintaining a lean operating model
• Mature security operations across enterprise and product systems
• Drive investment in Google SecOps and n8n for analytics, orchestration, response, and automation
• Own IAM across the GCP project estate and identity governance for the global workforce
• Manage joiner/mover/leaver processes, entitlement reviews, privileged access, and OAuth consent risk
• Own ZTNA, GCP perimeter security, and networking
• Own global end-user computing across macOS, ChromeOS, and managed BYOD browser services
• Manage device provisioning and retrieval across operating regions
• Own technology and physical security services for offices in Australia and the US
• Own the compliance program, enterprise risk register, and security inputs into vendor management and procurement
• Use UpGuard Cyber Risk as customer zero and feed operational experience into Product, Sales, and Customer Success
• Brief the executive team, Steering Committee, and Board
• Engage credibly with customers and prospects on security matters
• Report directly to the CEO and transition alongside the outgoing CISO

• Track record personally building and operating technology at scale
• Experience running a data centre, infrastructure function, or substantial operations function
• Infrastructure and operations foundation with security layered over systems ownership
• Experience operating in a consequential environment where process and discipline were critical
• Ability to build and scale capability with limited resources, prioritizing automation over headcount
• Comfort owning infrastructure, security, applications, and identity together
• Hands-on ability to architect controls, review Terraform changes, and lead incidents
• Substantial GCP experience strongly preferred; deep AWS or Azure experience considered
• Experience with zero trust access, identity-centric security models, and modern SaaS estate management
• Accountable ownership of a SOC 2, ISO 27001, or equivalent compliance program through audit
• Ability to absorb context and become oriented within weeks
• High-energy, self-directed, and relentless working style
• Comfort operating in a fast-paced, high-growth, remote-first environment
• Must undertake a national police history check and reference checks
• Must have unrestricted or otherwise valid working rights in Australia without requiring company visa sponsorship

• Monthly Lifestyle subsidy for financial, physical, and mental well-being
• WFH set-up allowance within the first 3 months
• $1500 USD annual Learning & Development allowance
• Annual leave/PTO plus two additional UpGuardian leave days
• 18 weeks paid Parental Leave
• Personal Leave Allowance including sick and carer’s leave
• Fully remote working environment with no compulsory office attendance
• Top-spec laptops provided
• Paid subscriptions for generative AI tools
• Global technology employer with offices in Sydney and Hobart