Job Description

The Security Operations Lead is responsible for enabling effective day-to-day cyber security operations. The role leads operational activities across incident response, vulnerability management, security monitoring, provider management and control remediation while supporting the CISO and Technology teams to reduce cyber risk and improve operational resilience.

Key responsibilities:

- Security Operations & SOC Management: Lead day-to-day operations (alert triage, incident containment, runbook maintenance) and manage the operating rhythm, service levels, and escalation paths with the SOC/MSP.
- Vulnerability & Control Monitoring: Monitor key security controls across identity, endpoint, cloud, and networks; track and prioritize high-risk vulnerabilities, ensuring clear ownership and timely remediation.
- Cyber Risk, Governance & Audit Alignment: Maintain the operational risk register, coordinate evidence collection for ISO 27001, audit, and Line 1/2/3 assurance activities, and manage formal risk acceptance/exception workflows.
- Cloud,



Data & AI Security Monitoring: Partner with Engineering, Technology and business stakeholders to embed and operationalise cloud, data, software and AI security controls across development and CI/CD processes, supporting monitoring, response and remediation activities for data security posture, misconfigurations, risky access, data exposure and other security risks while ensuring controls are practical, effective and integrated into day-to-day operations.
- Operational Reporting & CISO Advisory: Deliver explicit operational reporting to the CISO on security posture, incident trends, vulnerability remediation progress, and third-party provider performance.
- Stakeholder Engagement & Capability Building: Partner closely with Technology teams and business units to embed workable security controls, lead cyber awareness/phishing initiatives, and foster shared ownership of cyber risks.

📌 Security Operations Lead (Melbourne)
🏢 Scyne Advisory
📍 Melbourne