Shape the future of cyber security across Australia's research sector.

AAF sits at the heart of Australia's higher education and research community, providing the trusted identity and authentication infrastructure that enables more than 1.5 million researchers, academics and students to securely collaborate across universities, government and research institutions.

It’s critical national infrastructure.

Every day, AAF helps protect access to some of Australia's most important research, from medical breakthroughs to scientific collaboration, while ensuring security never becomes a barrier to innovation.

As cyber threats continue to evolve, AAF is creating a dedicated Chief Information Security Officer (CISO) to lead the next chapter of its cyber maturity - a position we're advertising as Head of Cyber Security to better reflect the scale and hands‑on nature of the setting.

The role itself hasn't changed. You'll be AAF's CISO internally, reporting directly to the CEO, regularly engaging with the Board, shaping security strategy across the organisation and becoming a recognised voice within Australia's Trust & Identity community.

The Opportunity

This isn't the type of CISO role where you inherit a team of thirty people and spend your time approving policies.

You'll be hands‑on where it matters, strategic where it counts, and highly visible across both the organisation and the broader sector.

You'll lead AAF's cyber security strategy, own its ISO 27001 Information Security Management System, guide executive decision making, oversee organisational risk, mentor a Cyber Security Officer and work alongside technical leaders to continually strengthen the organisation's security posture.

Beyond the organisation itself, you'll represent AAF across universities, research institutions, government and industry forums, helping shape conversations around cyber security, trust, identity and digital resilience across Australia.

If you're looking for a role where your influence extends well beyond the walls of one business, this is it.





What you'll be responsible for

You:

- Develop and execute AAF's cyber security strategy while continuing to mature the organisation's security capability.
- Own and continually improve AAF's ISO 27001 Information Security Management System (ISMS).
- Lead cyber governance, risk management, compliance and security assurance across the organisation.
- Present meaningful cyber risk and security updates to the Executive Leadership Team, Audit & Risk Committee and Board.
- Lead incident response, business continuity and organisational resilience initiatives.
- Provide security guidance across cloud platforms, enterprise systems, identity services and emerging technologies.
- Mentor and support the Cyber Security Officer while partnering closely with technical leaders across the organisation.
- Represent AAF externally through industry working groups, conferences, communities of practice and strategic partnerships.
- Help strengthen cyber capability across Australia's higher education and research community.

About you

You're someone who enjoys operating at both strategic and technical levels.

You can comfortably explain cyber risk to a Board, then roll up your sleeves and help navigate a complex security incident when required.

You’ll likely bring experience across many of the following:

- Leading cyber security, information security or cyber risk functions.
- Delivering or operating ISO 27001 Information Security Management Systems.
- Security governance, risk management and compliance frameworks.
- Cloud security (AWS and/or Microsoft environments).
- Incident response, business continuity and disaster recovery.
- Executive and Board reporting.
- Building security strategy and roadmaps.
- Working within highly regulated or critical infrastructure environments.

Experience with frameworks such as ISO 27001, NIST or the Essential Eight will be highly regarded, as will certifications including CISSP, CISM, CISA or CRISC.

Experience within higher education, research, government, identity or trust‑based environments would be advantageous, but isn't essential.

The type of person who'll thrive here

We're lo

📌 Head of Cyber Security (Canberra)
🏢 Fynd
📍 Canberra