Chief Information Security Officer | PE-Owned Healthcare Company The Opportunity

JTE is excited to be partnering with a private equity-owned Healthcare business seeking to appoint a Chief Information Security Officer to lead its cybersecurity function at a pivotal stage of growth. This is a business-critical, Executive Leadership Team role for a candidate who understands that in a business handling sensitive patient, clinical, and customer data, cybersecurity is not a cost centre to be managed — it is a foundation for trust, growth, and value creation.

This role will be central to enabling cybersecurity capability for both internal operations and external customers, and in doing so, will directly underpin the company's investment thesis and long-term value creation plan.

About the Role The CISO will own the end-to-end cybersecurity strategy, ensuring the organisation is resilient today and prepared for what's ahead. This individual will act as a key functional partner to the AI and Data functions, recognising that security, data governance, and AI capability are now inseparable — and will play a central role in the organisation's build, partner, and offshore decisions across the technology estate.

A defining element of this role will be the ability to draw on extensive knowledge of both local and international cybersecurity trends — regulatory developments, emerging threat patterns, and evolving best practice — and translate that intelligence into a strategy that is genuinely fit for this business, not a generic playbook. The successful candidate will assess the organisation's current cybersecurity maturity honestly, and build a roadmap that meets the business where it is, while deliberately raising the bar over time.

This is not security for its own sake. The strategy must be explicitly designed to enable the investment strategy — giving the PE partner, Board, and prospective acquirers confidence in the organisation's security posture,



supporting due diligence readiness, and directly protecting and enhancing enterprise value as the business scales.

Key Responsibilities

- Own and evolve the cybersecurity strategy and roadmap, aligning it with business strategy, regulatory obligations, and the investment strategy
- Draw on extensive knowledge of local and international cybersecurity trends, threat intelligence, and regulatory change to keep the strategy current and forward-looking
- Assess the organisation's cybersecurity maturity honestly, and build a roadmap that is realistic for where the business is today while deliberately raising the bar over time
- Build and mature cybersecurity capability that serves as a genuine commercial differentiator with external customers and partners, not solely an internal control function
- Act as a critical functional partner to AI and Data leadership, ensuring security, privacy, and governance are embedded into AI and data initiatives by design
- Lead key strategic decisions on build vs. partner vs. offshore across the security and technology stack, balancing cost, capability, control, and risk
- Anticipate emerging threats and regulatory change, proactively preparing the organisation ahead of need rather than reacting after the fact
- Establish and oversee governance, risk, and compliance frameworks appropriate to a healthcare business operating in Australia,
- Lead incident response and crisis management capability, ensuring the business is tested, prepared, and resilient
- Report and present with credibility to the CEO, Executive Leadership Team, Non-Executive Board,



and PE sponsor on cyber risk posture and investment priorities
- Build a high-performing security function and foster a culture of security ownership across the wider organisation

The Successful Application

- A strong track record of success in senior cybersecurity leadership roles, ideally within Healthcare, other regulated industries, or PE-backed, high-growth environments
- Genuine humility and reflective judgement — someone who has learned as much from past setbacks as from success, and brings that perspective to how they lead
- A proactive, forward-looking mindset — someone who prepares the organisation for emerging risk rather than waiting for it to materialise
- Solid business acumen and commercial fluency; able to position cybersecurity as a strategic value driver, not just a technical or compliance function
- Demonstrated experience partnering closely with AI and Data functions, with a clear understanding of the security and governance implications of AI adoption
- Sound judgement on build, partner, and offshore strategy across technology and security capability
- Strong commercial and technical fluency across the modern security landscape — cloud security, identity and access management, threat detection, and DevSecOps — sufficient to challenge, direct, and hold technical teams and vendors to account, alongside sound knowledge of the Australian healthcare regulatory and data protection landscape
- Excellent stakeholder management and communication skills, with credibility at Board and investor level
- Prior experience within a PE-backed portfolio company is advantageous but not essential

Why This Role

This is an opportunity to build cybersecurity as a genuine strategic asset within a Healthcare business at an important stage of its growth — with direct CEO sponsorship, Board visibility, and a mandate to shape both the security function and the wider technology agenda.

📌 Chief Information Security Officer (Melbourne)
🏢 Jacob Thomas Executive
📍 Melbourne