Senior Manager Information Security
Core
Senior manager leading cyber governance, assurance, and enterprise security architecture for an energy company, acting as a trusted advisor to executives.
Role type
Senior Manager, Information Security (2IC)
Builds
Enterprise security strategy, governance frameworks, and secure-by-design architecture
Domain
Energy industry, Cyber Security
Required skills
Cyber governance, risk management, security architecture, regulatory compliance, stakeholder management, audit leadership, policy development, third-party assurance, security strategy
Preferred skills
CISSP, CISM, CISA, CRISC, TOGAF, SABSA, ISO 27001 Lead Auditor/Implementer
Technologies
SOCI Act, AESCSF, ISO 27001, NIST Cyber Security Framework, CPS 234, APRA Prudential Standards, Enterprise Risk Management Frameworks, Secure-by-Design Principles, Security Architecture Frameworks
Responsibilities
Lead enterprise-wide cyber governance, assurance, and compliance programs; manage compliance against security frameworks and regulatory obligations; lead internal and external audits and control assessments; provide specialist cyber security consulting; drive secure-by-design principles in architecture; oversee security risk management; develop security policies and standards; lead supplier and third-party assurance; deliver security reporting to executives; champion security awareness and culture; monitor emerging threats and regulatory changes.
Seniority
Senior Manager, hands-on leadership
