We're exclusively partnering with a well-established software and data business that helps participants in Australia's National Electricity Market monitor, analyse and make sense of market data.

The business is financially stable, has long-standing client relationships and runs a nimble culture with no unnecessary bureaucracy. Customers come first, and people take ownership of problems without waiting to be asked.

This role owns cyber security across the business, from the corporate environment through to client-facing products. You'll report to the executive team and build the function from the ground up. The aim is twofold: to make the business genuinely more secure, and to give customers confidence in that.

The first few months are about getting to know the systems and identifying the highest priority issues, then delivering visible progress against them alongside an agreed roadmap. The plan is expected to evolve over the next 6-18 months, and the role will grow with it.

This is a role for someone who is hands‑on, comfortable being the only security person in the business, and able to lift security without getting in the way of a team that already works well.

Key responsibilities

- Act as the subject matter expert on cyber security, advising leadership on risk and priorities
- Assess the current security position and deliver early wins against the highest priority issues
- Build and deliver a roadmap towards the most appropriate security standard or framework
- Develop policies and controls that map to that standard and reflect how the team actually works
- Guide the development team on secure-by-design practices and keep build and release pipelines secure
- Own the corporate security stack, including Microsoft 365, endpoint protection, network access and credential management
- Lead incident response and investigate outages when they occur
- Act as the point of contact for customers on security matters

We're exclusively partnering with a well-established software and data business that helps participants in Australia's National Electricity Market monitor, analyse and make sense of market data.





The business is financially stable, has long-standing client relationships and runs a nimble culture with no unnecessary bureaucracy. Customers come first, and people take ownership of problems without waiting to be asked.

This role owns cyber security across the business, from the corporate environment through to client-facing products. You'll report to the executive team and build the function from the ground up. The aim is twofold: to make the business genuinely more secure, and to give customers confidence in that.

The first few months are about getting to know the systems and identifying the highest priority issues, then delivering visible progress against them alongside an agreed roadmap. The plan is expected to evolve over the next 6-18 months, and the role will grow with it.

This is a role for someone who is hands‑on, comfortable being the only security person in the business, and able to lift security without getting in the way of a team that already works well.

Key responsibilities

- Act as the subject matter expert on cyber security, advising leadership on risk and priorities
- Assess the current security position and deliver early wins against the highest priority issues
- Build and deliver a roadmap towards the most appropriate security standard or framework
- Develop policies and controls that map to that standard and reflect how the team actually works
- Guide the development team on secure-by-design practices and keep build and release pipelines secure
- Own the corporate security stack, including Microsoft 365, endpoint protection, network access and credential management
- Lead incident response and investigate outages when they occur




- Act as the point of contact for customers on security matters

About you

- Mature, pragmatic and self-directed, comfortable working without supervision
- Able to drive change without disrupting a business that runs well
- Comfortable delivering in increments and adjusting the plan as you learn more
- Curious, and always looking for better ways of doing things
- Confident making the case for change based on evidence
- A clear communicator with non-technical colleagues and customers

Essential experience

- Hands-on experience implementing cyber security controls, not assessment or advisory alone (non-negotiable)
- DevSecOps experience across the software development lifecycle, CI/CD pipelines and security scanning
- Working knowledge of Azure, infrastructure as code and configuration management tooling
- Microsoft 365 security including conditional access, along with authentication and edge security
- Incident response experience

Desirable

- Exposure to SOCI or the AESCSF, or experience implementing comparable frameworks
- Broad awareness of the security tooling landscape, with no bias towards any one vendor
- Experience in, or a genuine interest in, the energy sector

Why you'll want to join

- Build and own a security function from the ground up
- Breadth across corporate security, product security and operations that larger organisations rarely offer
- A direct line to the owners of the business, where decisions get made quickly
- Exposure to an energy market going through significant change

Additional information

- Brisbane-based preferred, with strong candidates in Sydney or Melbourne considered
- Permanent, full time

Align Talent is committed to connecting outstanding candidates with opportunities where diverse perspectives are valued. Teams with different ideas and experiences are more creative, effective, and innovative. If this role excites you but you don't meet every point on the job description, applications from all qualified candidates are encouraged - skills, curiosity, and enthusiasm matter most.

#J-18808-Ljbffr

📌 Cyber Security Lead (Brisbane)
🏢 Align Talent
📍 Brisbane