Cyber Security Lead
Align Talent · Brisbane QLD ·
- Work mode
- Hybrid
- Seniority
- Lead
- Employment
- Full time
- Category
- Security
A sole hands-on security lead owning cyber security end to end at a software and data business serving Australia's National Electricity Market — assessing the current posture, building the security function and roadmap from scratch, guiding DevSecOps practices, and owning the Microsoft 365/Azure security stack through to incident response.
We're exclusively partnering with a well-established software and data business that helps participants in Australia's National Electricity Market monitor, analyse and make sense of market data.
The business is financially stable, has long-standing client relationships and runs a nimble culture with no unnecessary bureaucracy. Customers come first, and people take ownership of problems without waiting to be asked.
This role owns cyber security across the business, from the corporate environment through to client-facing products. You'll report to the executive team and build the function from the ground up. The aim is twofold: to make the business genuinely more secure, and to give customers confidence in that.
The first few months are about getting to know the systems and identifying the highest priority issues, then delivering visible progress against them alongside an agreed roadmap. The plan is expected to evolve over the next 6-18 months, and the role will grow with it.
This is a role for someone who is hands-on, comfortable being the only security person in the business, and able to lift security without getting in the way of a team that already works well.
Key responsibilities
About you
Essential experience
Desirable
Why you'll want to join
Additional information
Caught your eye and want to know more? Apply now or reach out to [email protected] for a confidential chat.
Align Talent is committed to connecting great candidates with opportunities where diverse perspectives are valued. Teams with different ideas and experiences are more creative, effective, and innovative. If this role excites you but you don't meet every point on the job description, applications from all qualified candidates are encouraged - skills, curiosity, and enthusiasm matter most.
The business is financially stable, has long-standing client relationships and runs a nimble culture with no unnecessary bureaucracy. Customers come first, and people take ownership of problems without waiting to be asked.
This role owns cyber security across the business, from the corporate environment through to client-facing products. You'll report to the executive team and build the function from the ground up. The aim is twofold: to make the business genuinely more secure, and to give customers confidence in that.
The first few months are about getting to know the systems and identifying the highest priority issues, then delivering visible progress against them alongside an agreed roadmap. The plan is expected to evolve over the next 6-18 months, and the role will grow with it.
This is a role for someone who is hands-on, comfortable being the only security person in the business, and able to lift security without getting in the way of a team that already works well.
Key responsibilities
- Act as the subject matter expert on cyber security, advising leadership on risk and priorities
- Assess the current security position and deliver early wins against the highest priority issues
- Build and deliver a roadmap towards the most appropriate security standard or framework
- Develop policies and controls that map to that standard and reflect how the team actually works
- Guide the development team on secure-by-design practices and keep build and release pipelines secure
- Own the corporate security stack, including Microsoft 365, endpoint protection, network access and credential management
- Lead incident response and investigate outages when they occur
- Act as the point of contact for customers on security matters
About you
- Mature, pragmatic and self-directed, comfortable working without supervision
- Able to drive change without disrupting a business that runs well
- Comfortable delivering in increments and adjusting the plan as you learn more
- Curious, and always looking for better ways of doing things
- Confident making the case for change based on evidence
- A clear communicator with non-technical colleagues and customers
Essential experience
- Hands-on experience implementing cyber security controls, not assessment or advisory alone (non-negotiable)
- DevSecOps experience across the software development lifecycle, CI/CD pipelines and security scanning
- Working knowledge of Azure, infrastructure as code and configuration management tooling
- Microsoft 365 security including conditional access, along with authentication and edge security
- Incident response experience
Desirable
- Exposure to SOCI or the AESCSF, or experience implementing comparable frameworks
- Broad awareness of the security tooling landscape, with no bias towards any one vendor
- Experience in, or a genuine interest in, the energy sector
Why you'll want to join
- Build and own a security function from the ground up
- Breadth across corporate security, product security and operations that larger organisations rarely offer
- A direct line to the owners of the business, where decisions get made quickly
- Exposure to an energy market going through significant change
Additional information
- Brisbane-based preferred, with strong candidates in Sydney or Melbourne considered
- Permanent, full time
Caught your eye and want to know more? Apply now or reach out to [email protected] for a confidential chat.
Align Talent is committed to connecting great candidates with opportunities where diverse perspectives are valued. Teams with different ideas and experiences are more creative, effective, and innovative. If this role excites you but you don't meet every point on the job description, applications from all qualified candidates are encouraged - skills, curiosity, and enthusiasm matter most.