Information Security Manager

Job Title: Information Security Manager
Location: Melbourne (Hybrid – Remote with on-site as required)
Reporting To: Chief Transformation & Technology Officer
Length: 2-year Fixed Term Contract

Join a highly respected, not-for-profit organisation operating nationally is seeking an experienced Information Security Manager to support and mature its internal security operations.

Key Responsibilities

• Lead and manage daily information security operations
• Maintain and improve controls aligned with CPS 234, NIST CSF, CIS Controls, and the Essential Eight
• Provide security leadership and assurance across enterprise transformation projects
• Manage incident response activities and coordinate escalation, resolution, and reporting
• Conduct third-party risk assessments and vendor security due diligence
• Maintain security documentation including policies, procedures, and risk registers
• Support security awareness initiatives and access governance processes
• Liaise with stakeholders across Technology, Risk, Compliance, and Executive
• Prepare and present security reports to senior leadership and governance forums
• Mentor internal resources and support succession planning for security capability

• Minimum 5 years in information security, preferably in regulated or financial services environments
• Strong knowledge of industry frameworks: NIST CSF, ISO 27001, Essential Eight
• Experience managing operational security functions and contributing to strategic projects
• Familiarity with APRA CPS 234 or similar compliance standards
• Demonstrated capability in incident management, risk assessment, and stakeholder engagement
• Excellent communication skills and ability to influence across technical and executive levels

• Experience supporting large-scale system or cloud transformation initiatives
• Knowledge of Identity and Access Management (IAM) principles and technologies
• Experience mentoring and developing junior cybersecurity staff
• Industry certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer

• Impactful role within a mission-driven, purpose-led organisation
• High-level engagement and support for cybersecurity from executive leadership
• Hybrid working model with Melbourne HQ presence
• Collaborative team environment with strong values and a clear sense of purpose
• Contribute to meaningful outcomes that benefit professionals across Australia