网络安全主管

We're looking for a practical and people-focused cyber security leader to lead our cyber security function. As the Head of Cyber Security, you'll be responsible for leading the day-to-day cyber security function and executing Intellihub's cyber security strategy, roadmap and risk management program. Reporting to the CIO, this role provides operational leadership across security operations, governance, risk, compliance, security architecture and cyber resilience activities.

Key Accountabilities

• Lead and deliver Intellihub's cyber security strategy, roadmap and governance framework, driving the ongoing maturity of cyber security capabilities across architecture, resilience and security operations.
• Identify, assess and mitigate cyber security risks across IT, IoT networks and third-party services.
• Provide security reporting, risk insights and recommendations to the CIO, Executive Team, customers and regulators.
• Drive cyber resilience, incident preparedness and recovery capabilities across the organisation.
• Provide security leadership across technology initiatives, embedding security-by-design principles from concept through to delivery.
• Oversee security assurance, third-party security risk and the effectiveness of cyber security controls.
• Act as a trusted cyber security advisor to business, technology and customer stakeholders, promoting security awareness and stakeholder engagement.
• Lead and develop a high-performing cyber security team, building capability across multiple security disciplines and fostering a culture of collaboration, accountability and continuous improvement.
• Provide effective oversight of cyber security investments, vendors and specialist partners to support the delivery of business and security outcomes.

Qualifications

This role would particularly suit someone who has led a small cyber security team or function, ideally within a critical infrastructure, energy, utilities or similarly regulated environment. You'll be comfortable balancing cyber security risk, operational requirements and business growth, while remaining resilient, adaptable and effective in a dynamic, evolving environment.

• Tertiary qualifications in Cyber Security, Information Technology, Computer Science or a related discipline.
• Proven experience leading a cyber security team within a lean or mid-sized organisation, with responsibility for guiding and overseeing a broad range of cyber security activities.
• Deep understanding of cyber security governance, regulatory obligations and security frameworks, including SOCI, CPS 234, ISO 27001, NIST and related industry standards.
• Knowledge of IoT, OT and cyber security risks associated with critical infrastructure environments.
• Strong understanding of cyber security operations, architecture, resilience, disaster recovery, assurance and risk management practices, including control effectiveness, audit requirements and recovery readiness.
• Experience engaging with regulators, government bodies and industry working groups on cyber security and critical infrastructure matters.
• Strong leadership, communication and stakeholder management skills, with the ability to influence decision-making, translate complex cyber security concepts into practical business outcomes, and successfully deliver initiatives in a complex environment.
• Proven ability to prioritise competing demands and allocate resources effectively across operational, regulatory and strategic initiatives.
• Experienced people leader with a passion for developing talent, building capability and creating high-performing teams.

Additional Information

• This role can be based in either our Melbourne or Sydney office.
• Hybrid working arrangement with an expectation of three days per week in the office.
• Centrally located offices with easy access to public transport and amenities.
• Opportunity to lead and shape Intellihub's cyber security strategy within a critical infrastructure organisation supporting the energy transition across Australia and New Zealand.
• Work closely with senior leaders and key stakeholders to influence business, technology and cyber security outcomes.