Information Security Operations Lead | Not-For-Profit |
Lead. Protect. Improve. If that's how you think about security, keep reading.
We're partnering with a well-established not-for-profit to find a hands-on Information Security Operations Lead.
This isn't a tick-and-flick role. You'll lead a security team, own the tooling stack, and be the critical link between SOC and the business when incidents happen. The function is maturing, there's a real transformation piece here with a backlog of uplift work to get stuck into alongside the BAU.
What You'll Be Doing
* Leading and mentoring a team of security professionals: Objectives, performance, culture, uplift
* Owning day-to-day security operations: Vulnerability management, EDR, SIEM, DLP, PAM, web and email filtering
* Coordinating incident response between the SOC and internal teams
* Driving capability uplift, automation, and control improvement across the security function
* Reporting on control effectiveness to the Head of Information Security
* Running the annual security awareness program, including phishing testing
* Delivering security projects from initiation through to completion
* Providing SME input across business initiatives and regulatory obligations
What You'll Bring
* Broad Security Operations and/or Engineering background: Vulnerability management, EDR, SIEM, DLP, access management
* Hands-on incident response experience, you've been in the room when things go wrong
* Strong understanding of enterprise security across cloud and hybrid environments
* Working knowledge of NIST CSF and NIST Controls
* Bachelor's degree in a related field or equivalent experience
* Toolset exposure to CrowdStrike, Qualys, Splunk, Microsoft 365, Azure, SailPoint, CyberArk, or Netskope (highly desirable)
* Experience in health insurance, health, or financial services (highly desirable)
* Familiarity with CPS 234 obligations (highly desirable)
* To be considered for this role, you must hold Australian Citizenship or Permanent Residency.
Why This Role?
This organisation has been serving Australian communities for decades, and the security function is taken seriously at the leadership level. It's an in-house role with real ownership, not a managed service, not a consultancy. You'll build genuine relationships, drive meaningful change, and do work that actually matters.