Chief Information Security Officer

This is a fully remote position, open to applicants in Australia.

📋 Description

• Take charge of the comprehensive enterprise technology and security scope, encompassing infrastructure, security, identity, applications, and workplace technology.

• Lead and expand IT and Security Operations, Cloud Platform Engineering, and Governance, Risk, and Compliance (GRC).

• Mentor current leaders, establish technical standards, and develop the necessary team while upholding a streamlined operating model.

• Enhance security operations across enterprise and product systems.

• Propel investment in Google SecOps and n8n for analytics, orchestration, response, and automation.

• Manage IAM across the GCP project landscape and oversee identity governance for the global workforce.

• Handle joiner/mover/leaver processes, entitlement reviews, privileged access, and OAuth consent risk.

• Oversee Zero Trust Network Access (ZTNA), GCP perimeter security, and networking.

• Manage global end-user computing for macOS, ChromeOS, and managed BYOD browser services.

• Coordinate device provisioning and retrieval across various operating regions.

• Direct technology and physical security services for offices located in Australia and the US.

• Lead the compliance program, enterprise risk register, and security contributions to vendor management and procurement.

• Utilize UpGuard Cyber Risk as a primary customer and integrate operational insights into Product, Sales, and Customer Success.

• Present updates to the executive team, Steering Committee, and Board.

• Interact credibly with customers and prospects regarding security issues.

• Report directly to the CEO and transition alongside the outgoing Chief Information Security Officer (CISO).

⛳️ Requirements

• Proven history of personally building and managing technology at scale.

• Experience in overseeing a data center, infrastructure function, or significant operations function.

• Strong foundation in infrastructure and operations with security integrated into systems ownership.

• Demonstrated experience in a critical environment where process and discipline were essential.

• Ability to develop and scale capabilities with limited resources, emphasizing automation over headcount.

• Comfortable managing infrastructure, security, applications, and identity collectively.

• Hands-on skill in architecting controls, reviewing Terraform changes, and leading incident responses.

• Significant GCP experience is highly preferred; substantial AWS or Azure experience will also be considered.

• Familiarity with zero trust access, identity-centric security models, and modern SaaS estate management.

• Responsible ownership of a SOC 2, ISO 27001, or equivalent compliance program through audits.

• Ability to quickly absorb context and orient oneself within weeks.

• High-energy, self-motivated, and relentless working style.

• Comfortable working in a fast-paced, high-growth, remote-first environment.

• Must undergo a national police history check and reference checks.

• Must possess unrestricted or otherwise valid working rights in Australia without requiring company visa sponsorship.

🏝️ Benefits

• Monthly Lifestyle subsidy for financial, physical, and mental well-being.

• Work-from-home setup allowance within the first 3 months.

• $1500 USD annual Learning & Development allowance.

• Annual leave/PTO plus two additional UpGuardian leave days.

• 18 weeks of paid Parental Leave.

• Personal Leave Allowance including sick and carer’s leave.

• Fully remote working environment with no mandatory office attendance.

• High-spec laptops provided.

• Paid subscriptions for generative AI tools.

• Global technology employer with offices in Sydney and Hobart.