Role: ICT Security Lead (Technical) (Internal Title: ICT Security, Risk & Compliance Lead)

Location: Murarrie, Brisbane

Employment Type: Full-time, Permanent

Our Role

At Goodstart, we're committed to keeping the information of our children, families and people secure. We're looking for an experienced ICT Security Lead (Technical) to join our cybersecurity team and play a hands‑on role in strengthening Goodstart's security environment and cyber resilience.

Reporting to the ICT Manager – Security & Risk, you'll work across our technology environment to implement and improve security controls, respond to incidents, remediate vulnerabilities and strengthen our overall security posture.

This is a hands‑on technical cybersecurity role, with a strong focus on identity and access security, Microsoft security technologies, vulnerability management and the implementation of the Essential Eight.

You'll work across technologies including Microsoft Entra ID, Microsoft Defender and Microsoft Sentinel, while partnering with infrastructure, application and business teams to drive security improvements through to completion.

We're looking for someone who enjoys getting hands‑on with technology and solving complex security challenges, but who can also build solid relationships and translate technical security risks into practical, business‑focused actions.

Your Impact

- Design, implement and continuously improve Microsoft Entra ID security controls, including Conditional Access, Privileged Identity Management (PIM) and Privileged Access Management (PAM).
- Configure and manage Microsoft Defender and Microsoft Sentinel, including security policies, analytics rules, KQL queries and playbooks.




- Implement and mature Essential Eight security controls, including application control, patching, macro controls and restriction of administrative privileges.
- Lead the remediation of vulnerability and penetration testing findings, working with infrastructure, application and business owners to drive issues through to closure.
- Participate directly in security incident response, including triage, containment, investigation and evidence handling.
- Support the management and security of digital certificates, root certificates and authentication tokens across the technology environment.
- Identify security risks and provide practical, technically informed recommendations to technology teams and business stakeholders.
- Monitor and improve Goodstart's security controls, identifying opportunities to strengthen the organisation's cyber resilience and reduce security risk.
- Work collaboratively with teams across ICT to implement security improvements and ensure remediation actions are completed.
- Translate complex technical security findings into clear, practical advice for non‑technical stakeholders.
- Contribute to the ongoing development of security engineering practices, standards and capabilities across Goodstart.

What Goodstart Can Offer You





- Enjoy flexible work arrangements that support both your professional and personal commitments.
- Salary packaging benefits available through AccessPay (eligibility applies).
- Access to discounted childcare (up to 15%).
- Fitness Passport – access to gyms and pools for you and your family at a heavily discounted price.
- Discounted health care and access to employee wellbeing program with BUPA.
- Exclusive discounts on travel, gym memberships, Apple and Dell products, and more.
- Free annual flu shot (optional).
- Option to purchase extra leave for even greater work‑life balance.
- First Nations Support and Cultural Leave.
- Work for a company that aspires to be globally recognised for early years practice and learning outcomes.
- Gain significant investment in your growth and development with ongoing support, tools, training and experiences that will enhance outcomes for children in their earliest years.

You’ll bring to the table

We're looking for a technically hands‑on cybersecurity professional who has built and implemented security capabilities, rather than someone whose experience is primarily focused on governance, risk or audit.

You’ll Bring

- 5+ years' experience in cybersecurity engineering, information security or a similar hands‑on technical security role.
- Strong hands‑on experience designing and implementing Microsoft Entra ID, including Conditional Access, Privileged Identity Management (PIM) and Privileged Access Management (PAM).
- Hands‑on experience with Microsoft Defender and Microsoft Sentinel, including security configuration, analytics rules, KQL and playbooks.
- Demonstrated experience implementing Essential Eight controls, rather

📌 ICT Security Lead (Brisbane)
🏢 Goodstart Early Learning
📍 Brisbane