Cyber Security Manager

CYBER SECURITY MANAGER

Up to $185,000 base + super, shares, bonus and additional benefits

Sydney | Hybrid | Four days in office

Help protect the digital platforms customers use to order, pay and engage with the business, alongside the corporate systems and distributed restaurant network that support them.

You’ll set security priorities and work closely with platform, digital and specialist security teams to make sure the right controls are in place and security gaps are resolved. This needs someone with the technical depth to investigate issues, challenge recommendations and check that improvements work in practice.

Reporting to the Head of Technology Services, you’ll manage one Information Security Analyst and work with technology leaders, business stakeholders and security partners.

THE ROLE

You’ll be responsible for:

• Leading the security programme across corporate technology, cloud platforms, digital products and payments.
• Assessing monitoring and detection coverage, investigating issues and ensuring vulnerabilities are properly resolved.
• Working with platform and digital teams to validate security controls across cloud, identity, networks and endpoints.
• Leading cyber security incident response and following through on recovery and improvements.
• Taking responsibility for digital fraud risks, working with internal teams and payment providers on detection and mitigation.
• Managing the annual PCI DSS assessment with external assessors, including evidence and remediation, alongside wider security assurance.
• Directing security partners and vendors, overseeing penetration testing and checking that agreed work delivers the required result.
• Developing the Information Security Analyst and helping teams make practical security decisions.

WHAT WE’RE LOOKING FOR

You’ll bring broad security experience and sound technical judgement. You should be comfortable working directly with security evidence and tools, while knowing how to get effective delivery from internal teams and specialist providers.

Ideally, you’ll have:

• Experience owning or significantly contributing to an organisation-wide security programme.
• Practical security operations experience, including investigation, incident response and vulnerability remediation.
• A strong understanding of cloud security and shared responsibilities, with the ability to assess controls across identity, networks and production systems.
• Experience challenging technical recommendations, reviewing evidence and verifying that security issues have been fixed.
• Working knowledge of PCI DSS and experience with security assessments, audit evidence and remediation.
• Confidence explaining technical risk to business leaders and resolving responsibilities across teams and suppliers.
• Experience directing an MSSP, security provider or specialist vendor.

You do not need to have personally built every cloud control or operated every security platform. You do need enough technical depth to know what good looks like, ask the right questions and hold delivery teams accountable.

Experience with digital fraud, payments, retail, franchise or other transaction-heavy environments would be useful. Retail experience is not essential.

Experience using AI to improve security monitoring, investigation or assurance, or securing AI-enabled systems, would also be valuable.

WHY THIS ROLE?

You’ll have broad responsibility across customer-facing digital services and the technology behind a distributed restaurant network, with direct access to technology and business leadership.

For someone who enjoys solving security problems across teams and staying close to the technology, this is a chance to shape priorities and see the improvements through.