Senior Manager - Security Operations and Threat Management

We’re all about helping our members make the most of their money. And while they go after their goals, you can too. As a Senior Manager, Security Operations and Threat Management, you’ll take on one of our most senior operational cyber security leadership roles, protecting the retirement savings and information of millions of members.

Reporting directly to the Chief Information Security Officer, you’ll have broad accountability spanning security operations, threat intelligence, vulnerability management, cyber incident response and resilience. You’ll shape strategy, influence enterprise priorities and lead the continued evolution of capabilities that are critical to Australian Retirement Trust.

This opportunity offers more than functional leadership. You’ll operate as a trusted adviser to the CISO and Information Security leadership team, represent the function with senior stakeholders and provide leadership across security when required. You’ll gain exposure to the breadth, complexity and executive decision-making needed to lead cyber security within a large, highly regulated organisation.

You may already lead cyber security, security operations or cyber defence within a smaller financial institution or complex organisation. Alternatively, you may be an established senior leader ready to broaden your enterprise remit. Either way, you’ll bring the judgement, presence and ambition to contribute beyond your immediate portfolio while remaining closely connected to operational delivery.

You’ll lead capable teams and strategic partners, oversee responses to significant cyber events and accelerate the use of automation, security orchestration and AI-enabled defence. Your leadership will help strengthen cyber resilience, reduce technology risk and support positive outcomes for our members.

This role is a permanent opportunity and is based in Brisbane, Sydney or Melbourne.

Day to day, you'll:

• Set and execute the Security Operations and Threat Management strategy, roadmap and operating model.
• Lead security operations, threat intelligence, vulnerability management and cyber incident response capabilities.
• Partner directly with the CISO and Information Security leadership team on enterprise strategy, investment and risk priorities.
• Act as a trusted adviser on cyber threats, operational security risks, emerging technologies and industry developments.
• Provide broader leadership across the Information Security function and represent the CISO when required.
• Lead the response to significant cyber security incidents, balancing technical, business, regulatory and member considerations.
• Ensure threats, vulnerabilities and incidents are proactively identified, assessed and managed within ART’s risk appetite.
• Drive improvements in threat detection, security monitoring, response, automation and AI-enabled defensive capabilities.
• Translate complex cyber risks into clear advice and recommendations for executives and senior stakeholders.
• Establish meaningful performance measures and insights to guide investment, decision-making and capability maturity.
• Lead strategic relationships with vendors and managed security service providers, ensuring performance, risk and commercial outcomes are achieved.
• Direct workforce, financial and capacity planning across your portfolio.
• Build succession depth and develop high-performing technical leaders and teams.
• Contribute to enterprise-wide cyber security, technology risk and resilience priorities.
• Support compliance with CPS 234 and other relevant regulatory, legislative and internal policy obligations.

It goes without saying you'll be a great communicator with top notch interpersonal skills. We'll also expect you to pick up problems and come up with quick, creative ways to solve them. It's quite likely you tick some of the following boxes too:

• You bring extensive leadership experience across security operations, cyber defence, threat management or a broader cyber security function.
• Your experience includes accountability for critical security capabilities within a complex, regulated organisation.
• You’ll have the strategic perspective and operational credibility to advise executives while remaining connected to front-line cyber delivery.
• You’re ready to broaden your leadership remit and contribute across an enterprise Information Security function.
• You have developed and executed cyber security strategies, roadmaps and operating models aligned with business and risk priorities.
• Your leadership style builds trust, accountability, capability and sound decision-making across technical teams.
• You’ll be confident leading through significant cyber incidents and making considered decisions in complex, time-sensitive circumstances.
• You’re experienced in engaging senior executives, risk leaders, technology teams, regulators and external partners.
• You understand cyber security governance, technology risk and regulatory obligations, including CPS 234.
• Your background includes managing strategic vendors, managed security service providers and complex commercial arrangements.
• You’ll bring experience in security transformation, capability uplift and continuous improvement.
• You’re knowledgeable about threat intelligence, vulnerability management, incident response and cyber resilience.
• You have experience using SOAR, automation or AI to improve security operations outcomes.
• Your knowledge includes recognised frameworks and standards such as the NIST Cybersecurity Framework, ISO 27001 and MITRE ATT&CK.
• You’ll hold relevant tertiary qualifications or equivalent professional experience, supported by certifications such as CISSP, CISM or GIAC.
• You’re likely to have experience in superannuation, banking, insurance or another highly regulated environment, although this isn’t essential.