Information Security Manager

About this role

• Permanent opportunity
• Melbourne CBD
• Lead security operations, orchestration, AI & automation
• Own ISO/IEC 27001:2022 security operations and assurance

Our client is seeking an experienced Information Security Operations Orchestration Manager to lead security operations and drive initiatives that strengthen the organisation’s security posture, resilience and maturity.

This is an opportunity for a security professional who can operate comfortably across security operations, incident response, governance, AI and automation, vendor management and executive stakeholder engagement.

Key Skills & Responsibilities

• Lead and oversee security operations including monitoring, incident response, vulnerability management, investigations and threat hunting.
• Own the end-to-end security operations lifecycle across detection, investigation, response and recovery.
• Orchestrate security analysts, automation platforms, AI-enabled capabilities and third-party security providers.
• Develop and maintain security playbooks, workflows, escalation paths and operating procedures.
• Lead the adoption of AI and automation across security operations, ensuring appropriate human oversight, governance and risk management.
• Proven experience leading security operations and/or incident response within a medium to large corporate environment.
• Demonstrated experience directly managing and sustaining an ISO/IEC 27001:2022 ISMS, including audit preparation, evidence management and corrective actions.
• Strong understanding of security operations tooling, operating models and threat intelligence.
• Experience across incident response, vulnerability management, threat hunting and security investigations.
• Strong knowledge of ISO 27001, ACSC Essential Eight and relevant Australian privacy and security obligations.
• Experience managing security vendors and third-party service providers, including service performance and continuous improvement.
• Up-to-date knowledge of information security risk management, cybersecurity technologies, methodologies and emerging trends across business and technology environments.
• Excellent written and verbal communication skills, with the ability to effectively engage and influence technical and non-technical stakeholders at all levels.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.