We're exclusively partnering with a well-established software and data business that helps participants in Australia's National Electricity Market monitor, analyse and make sense of market data.
The business is financially stable, has long-standing client relationships and runs a nimble culture with no unnecessary bureaucracy. Customers come first, and people take ownership of problems without waiting to be asked.
This role owns cyber security across the business, from the corporate environment through to client-facing products. You'll report to the executive team and build the function from the ground up. The aim is twofold: to make the business genuinely more secure, and to give customers confidence in that.
The first few months are about getting to know the systems and identifying the highest priority issues, then delivering visible progress against them alongside an agreed roadmap. The plan is expected to evolve over the next 6-18 months, and the role will grow with it.
This is a role for someone who is hands‐on, comfortable being the only security person in the business, and able to lift security without getting in the way of a team that already works well.
Key responsibilities
Act as the subject matter expert on cyber security, advising leadership on risk and priorities
Assess the current security position and deliver early wins against the highest priority issues
Build and deliver a roadmap towards the most appropriate security standard or framework
Develop policies and controls that map to that standard and reflect how the team actually works
Guide the development team on secure-by-design practices and keep build and release pipelines secure
Own the corporate security stack, including Microsoft 365, endpoint protection, network access and credential management
Lead incident response and investigate outages when they occur
Act as the point of contact for customers on security matters
We're exclusively partnering with a well-established software and data business that helps participants in Australia's National Electricity Market monitor, analyse and make sense of market data.




The business is financially stable, has long-standing client relationships and runs a nimble culture with no unnecessary bureaucracy. Customers come first, and people take ownership of problems without waiting to be asked.
This role owns cyber security across the business, from the corporate environment through to client-facing products. You'll report to the executive team and build the function from the ground up. The aim is twofold: to make the business genuinely more secure, and to give customers confidence in that.
The first few months are about getting to know the systems and identifying the highest priority issues, then delivering visible progress against them alongside an agreed roadmap. The plan is expected to evolve over the next 6-18 months, and the role will grow with it.
This is a role for someone who is hands‐on, comfortable being the only security person in the business, and able to lift security without getting in the way of a team that already works well.
Key responsibilities
Act as the subject matter expert on cyber security, advising leadership on risk and priorities
Assess the current security position and deliver early wins against the highest priority issues
Build and deliver a roadmap towards the most appropriate security standard or framework
Develop policies and controls that map to that standard and reflect how the team actually works
Guide the development team on secure-by-design practices and keep build and release pipelines secure
Own the corporate security stack, including Microsoft 365, endpoint protection, network access and credential management
Lead incident response and investigate outages when they occur




Act as the point of contact for customers on security matters
About you
Mature, pragmatic and self-directed, comfortable working without supervision
Able to drive change without disrupting a business that runs well
Comfortable delivering in increments and adjusting the plan as you learn more
Curious, and always looking for better ways of doing things
Confident making the case for change based on evidence
A transparent communicator with non-technical colleagues and customers
Essential experience
Hands-on experience implementing cyber security controls, not assessment or advisory alone (non-negotiable)
DevSecOps experience across the software development lifecycle, CI/CD pipelines and security scanning
Working knowledge of Azure, infrastructure as code and configuration management tooling
Microsoft 365 security including conditional access, along with authentication and edge security
Incident response experience
Desirable
Exposure to SOCI or the AESCSF, or experience implementing comparable frameworks
Broad awareness of the security tooling landscape, with no bias towards any one vendor
Experience in, or a genuine interest in, the energy sector
Why you'll want to join
Build and own a security function from the ground up
Breadth across corporate security, product security and operations that larger organisations rarely offer
A direct line to the owners of the business, where decisions get made quickly
Exposure to an energy market going through significant change
Additional information
Brisbane-based preferred, with strong candidates in Sydney or Melbourne considered
Permanent, full time
Align Talent is committed to connecting great candidates with opportunities where diverse perspectives are valued. Teams with different ideas and experiences are more creative, effective, and innovative. If this role excites you but you don't meet every point on the job description, applications from all qualified candidates are encouraged - skills, curiosity, and enthusiasm matter most.
#J-*****-Ljbffr

📌 Cyber Security Lead (Brisbane)
🏢 Align Talent
📍 Brisbane