Why this role matters

Sonic conducts approximately 129 million patient consultations each year, and the speed, accuracy and accessibility of our diagnostic services increasingly depend on the digital platforms that connect our laboratories, clinicians and patients. Protecting sensitive health information is fundamental to everything we do.

This role is driven by:

- The trust patients, physicians and regulators place in us to protect sensitive health information
- Growing critical infrastructure and data‑protection obligations in every market in which we operate
- An evolving external threat landscape targeting healthcare and diagnostic services
- Security capabilities that today sit at differing levels of maturity across our federated group

The CISO will be the senior executive accountable for setting direction, enabling assurance and supporting the continued uplift of information security across the group.

Key responsibilities

- Agree, steward and progress the group‑wide information security strategy, policies, standards and governance, and represent information security at executive level
- Mature the security function by connecting and aligning security capabilities across the group into a more coherent global community of practice, while building security operations, threat monitoring and incident response towards a 24x7 model
- Guide the convergence and uplift of major security capabilities across markets – identity and access management, network segmentation, encryption, endpoint, email and web security, and vulnerability management
- Enable the cyber resilience, risk‑management and regulatory‑assurance programs required to meet critical infrastructure and data‑protection obligations in every market, including supply chain and third‑party security




- Embed security and privacy into the design, build and operation of diagnostic platforms and patient‑facing applications, so protection is built in rather than bolted on
- Provide executive leadership for security operations, monitoring, detection and incident response, helping ensure the group is resilient to cyber incidents and able to recover diagnostic services rapidly

Leadership style and fit

- Strong information security expertise and the technical credibility to engage hands‑on
- High emotional intelligence and the ability to lead through influence
- Respect for qualified expertise and decentralised operating models
- Genuine executive presence – confidence, humility and pragmatism in equal measure

Background and experience

- Proven track record as a senior information security leader (e.g. CISO, deputy CISO or Head/VP of Information Security), ideally in complex multinational organisations
- 15+ years of progressive experience in technology and information security roles, with deep knowledge of enterprise information security
- Experience operating in a federated or decentralised organisation is highly regarded
- Experience in healthcare or another highly regulated, data‑sensitive industry is welcome but not required

Practicalities

- Location: Sydney (relocation required if not already based in Sydney)
- Travel: International travel expected

How to express interest

This role will be advertised internally and externally. Internal candidates who believe they have the capability and experience to succeed in this role are encouraged to register their interest in confidence. To register interest or ask any questions, please contact Matthias Hansen, Chief Digital, Data and Information Officer, via ••••@sonichealthcare.com

#J-18808-Ljbffr

📌 Chief Information Security Officer (City of Sydney)
🏢 @
📍 City of Sydney