Business Unit: Information Technology

Date: 26 Oct 2026

Requisition ID: 1209

About Snowy

Snowy Hydro is a dynamic, integrated energy business that has been providing on-demand, reliable energy to Australia for generations. Snowy Hydro owns and operates a powerful combination of generation assets, including the iconic Snowy Hydro-electric Scheme, gas and diesel electricity generating plants, and contracted wind and solar energy in the National Electricity Market. We also provide electricity and gas to over 1.5 million retail customers through our retail brands Red Energy and Lumo Energy.

Snowy 2.0, currently under construction, is Australia's largest committed renewable energy project. This nation-building project will provide on-demand energy and large-scale storage for many generations to come.

About The Position

We are currently seeking an experienced Cyber Security Operations Manager to direct, oversee, and elevate our daily cyber security operations across both IT and operational technology (OT) environments.

In this key leadership role supporting the Head of Cyber Security, you will lead a dedicated team of security specialists, incident response engineers, and analysts. You will be responsible for ensuring team operational readiness, optimising detection engineering and automation, managing major security incidents, and collaborating closely with risk and resilience teams on BCP/DR tabletop exercises. As an enterprise-grade technical leader and curious problem solver, you will also bridge the gap between technical operations and senior executive leadership.

This role offers flexible working arrangements with opportunities to collaborate across our Snowy Hydro teams.

Key Responsibilities

- Security Operations & Incident Command:



Manage daily SOC monitoring capabilities, detection platforms, and incident triage workflows across critical IT and OT environments. Act as Incident Manager during major cyber security incidents, directing technical containment, executive briefings, and post-incident root cause analysis.
- Continuous Capability Uplift & Automation: Drive the ongoing optimisation of detection logic, threat intelligence integration, and automated SOAR playbooks to lower MTTD and MTTR. Stay ahead of emerging threat vectors, including AI-related vulnerabilities and critical infrastructure risks.
- Resilience & Disaster Preparedness: Partner with the Risk and Governance teams to conduct regular BCP/DR tabletop exercises, refine operational response playbooks, and ensure multi-tiered response readiness.
- Partner & Vendor Management: Oversee Managed Detection and Response (MDR/MSSP) vendor performance, ensuring service levels, quality of analysis, and streamlined operational handoffs.
- Team Leadership & Mentorship: Lead, mentor, and foster capability within a growing operational team (4–5 direct reports), cultivating a continuous learning environment, operational excellence, and team sustainability.
- Executive Reporting & Stakeholder Engagement: Track SOC operational metrics and KPIs, preparing clear,



strategic briefs and presentations for senior management, executive leadership, and board-level visibility.

About the location

This role is based in Melbourne.

About You

- Proven Operational Leadership: Demonstrated leadership experience running a modern SOC or technical incident response team within an enterprise environment (e.g., banking/financial services, critical infrastructure, utilities, transport, FMCG, or top-tier consultancy).
- Strong Technical Foundation: Extensive background working your way through technical cyber roles with practical depth across SIEM, EDR/XDR, SOAR, threat intelligence, and network detection technologies.
- Inquisitive Problem Solver: A naturally curious mindset with a proactive drive to investigate complex issues, explore alternative paths, and implement sustainable solutions.
- Decisive Crisis Leader: Calm and structured under pressure, with proven experience commanding major cyber incident responses and managing operational handoffs.
- Executive Communication Skills: Exceptional ability to distill technical complexity into actionable insights for senior executives and diverse business stakeholders.
- Qualifications & Certifications: Relevant industry certifications (e.g., CISSP, CISM, GIAC) or degree in Cyber Security, Computer Science, or Information Technology are highly regarded, though deep practical enterprise experience is prioritized.
- Safety & Values Driven: Demonstrated commitment to safety leadership, ethical conduct, collaboration, and mutual accountability.

About Our Workforce

Snowy Hydro has a culture of decency and inclusion, with a commitment to the health and wellbeing of our people and a supportive setting t

📌 Cyber Security Operations Manager (Melbourne)
🏢 Snowy Hydro
📍 Melbourne