Cyber Security Lead

? Sydney, NSW

⏳ Permanent Opportunity

? Hybrid Working Arrangement

About the Role

We are seeking an experienced Cyber Security Lead to play a key role in shaping and advancing cyber security capability across a large and complex organisation. This position will be responsible for cyber security governance, risk management, security assurance, stakeholder engagement, and the continuous improvement of security controls, ensuring alignment with industry best practices and organisational objectives.

You will partner with technical and business stakeholders, provide expert security advice, lead cyber risk initiatives, support incident response activities, and drive a solid culture of security awareness throughout the organisation.

Key Responsibilities

- Provide strategic cyber security advice across projects, infrastructure, applications, and business initiatives.
- Lead security risk assessments and cyber security initiatives aligned with organisational security strategy.
- Conduct and manage security reviews of applications, systems, cloud environments, and infrastructure.
- Coordinate third-party security risk assessments and remediation activities.
- Lead investigations and response activities for cyber security incidents and threats.
- Develop, maintain, and improve security policies, standards, and governance frameworks.




- Support and manage relationships with Managed Security Service Providers (MSSPs).
- Drive cyber security awareness and education programs across the organisation.
- Collaborate with internal teams, vendors, and business stakeholders to improve security outcomes.

About You You will bring strong experience in cyber security governance, risk, and assurance, combined with the ability to engage and influence stakeholders at all levels.

Essential Skills & Experience

- Degree qualification in Information Security, Cyber Security, Information Technology, or a related discipline.
- Proven experience leading cyber security governance, risk, and assurance activities.
- Strong understanding of security control design, implementation, and monitoring.
- Experience securing Microsoft Azure and Microsoft Entra ID environments.
- Experience conducting security assessments and reviews across applications, systems, and infrastructure.
- Knowledge of cyber security frameworks and standards including:
- ASD Essential Eight
- ISM
- NIST
- ISO 27001, ISO 27002 and ISO 27005
- Strong stakeholder management, communication, and influencing skills.
- Experience providing cyber risk mitigation and security policy guidance.

Highly Desirable

- CISSP, CISM, or CISA certification.
- Experience with Operational Technology (OT) Security.
- Previous experience working in large enterprise or government environments.

📌 Cyber Security Lead (Sydney)
🏢 Hays
📍 Sydney