Information Security Architect at HESTA Super Fund – Melbourne VIC | Jobyssey

Bring your authentic and passionate self to this exceptional role #careerswithimpact

Join HESTA’s growing Information Security/Cybersecurity team and play a key role in shaping our security architecture capability and embedding Secure-by-Design and Zero Trust principles across the organisation. Reporting to the Information Security Architecture, Strategy & Engineering Manager, you’ll provide expert security architecture advice across technology, digital, data and cloud initiatives – helping teams design secure solutions while enabling the safe adoption of emerging technologies, including AI/ML, cloud, SaaS and modern development practices.

This is an opportunity to join a maturing security environment where you can influence architecture, uplift capability and make a meaningful impact in a highly regulated industry.

What You’ll Do

Develop and evolve HESTA’s Enterprise Security Architecture Framework, aligned to NIST, ISO 27001, APRA CPS 234 and relevant Australian security standards.
Define security standards, reference architectures, control baselines and reusable patterns across applications, data and infrastructure.
Provide security architecture advice and challenge solution designs across major technology and digital initiatives.
Conduct architecture reviews and threat modelling, identifying risks and recommending practical controls and mitigations.
Provide specialist expertise across AWS, Azure and/or GCP, including IAM, encryption, network security, logging and cloud security posture.
Embed security into SDLC, DevOps, CI/CD and cloud delivery through practical guardrails and review gates.
Enable the secure adoption of AI/ML, SaaS, containers and serverless technologies, including appropriate AI security controls.
Partner with Technology, Enterprise Architecture, Risk, Compliance, Digital and business teams to strengthen security capability and culture.

What You’ll Bring

Demonstrated experience in security architecture within complex, cloud-first environments.
Strong experience embedding Secure-by-Design, Zero Trust and security controls into technology delivery.
Expertise across cloud security architecture, ideally AWS, Azure and/or GCP.
Experience with threat modelling, architecture reviews, security assessments and assurance.
Understanding of securing AI/ML and emerging technologies, including AI guardrails and model protection.
Strong knowledge of NIST CSF, ISO 27001, CIS, APRA CPS 234/CPS 230 and Australian privacy requirements.
Experience in financial services, superannuation or another regulated environment is highly regarded.
Relevant cybersecurity, IT or Computer Science qualifications and industry certifications are advantageous.

If you’re an experienced security architect who enjoys solving complex problems, influencing technology decisions and building security into the future – we’d love to hear from you – Apply Now

Benefits that matter and make a difference for our employees

Leave for those moments that matter, an additional 6 days of leave at the end of year, up to 6 days paid volunteer leave, gender neutral paid parental leave of 20 weeks, Gender Affirmation leave, reproductive health and wellbeing leave, Cultural and Ceremonial leave. Access your LSL after 3 years, take AL at half pay, and purchase up to 2 weeks additional leave (just to name a few).
Your professional development matters, up to $5,000 per year professional development and up to 8 days professional development leave, HESTA scholarships and free access to a range of premium learning tools.
Your health and wellbeing matters, free annual flu shots and skin checks, incredible social events throughout the year and a comprehensive employee assistance program available 24/7.
Your financial wellbeing matters, up to 15% super, financial planning support, end of year payment for all Enterprise Agreement-covered employees, incentivised Employee Referral Program and novated lease options.

We celebrate, value and include people of all backgrounds, genders, identities, cultures and abilities. We welcome and support applications from First Nations people, physically, neuro or culturally diverse, LGBTQI+, and people of any age. We are proud to be WGEA accredited as an Employer of Choice for Gender Equity.

We want all candidates to feel safe, included and provided with the best opportunity to thrive, if you require reasonable adjustments during your application or throughout the recruitment process, please reach out to a member of the Talent team [email protected] and we’ll call you to discuss.

Please note: Applications via recruitment agencies will not be accepted for this position.

Information Security Architect

Similar jobs