Chief Information Security Officer

This is a fully remote position, open to applicants in Australia.

📋 Description

• Oversee the comprehensive enterprise technology and security scope, encompassing infrastructure, security, identity, applications, and workplace technology.

• Direct and expand IT and Security Operations, Cloud Platform Engineering, and Governance, Risk, and Compliance (GRC).

• Mentor current leaders, establish technical standards, and develop the necessary team while upholding a streamlined operating model.

• Advance security operations across enterprise and product systems.

• Promote investment in Google SecOps and n8n for analytics, orchestration, response, and automation.

• Manage Identity and Access Management (IAM) across the Google Cloud Platform (GCP) project landscape and oversee identity governance for the global workforce.

• Supervise joiner/mover/leaver processes, entitlement reviews, privileged access, and OAuth consent risk.

• Take charge of Zero Trust Network Access (ZTNA), GCP perimeter security, and networking.

• Oversee global end-user computing across macOS, ChromeOS, and managed Bring Your Own Device (BYOD) browser services.

• Manage device provisioning and retrieval across various operational regions.

• Supervise technology and physical security services for offices located in Australia and the United States.

• Direct the compliance program, enterprise risk register, and security contributions to vendor management and procurement.

• Utilize UpGuard Cyber Risk as a primary customer and provide operational insights to Product, Sales, and Customer Success teams.

• Present updates to the executive team, Steering Committee, and Board.

• Engage confidently with customers and prospects regarding security issues.

• Report directly to the CEO and transition alongside the outgoing Chief Information Security Officer (CISO).

⛳️ Requirements

• Proven experience in building and managing technology at scale.

• Background in running a data center, infrastructure function, or a significant operational function.

• Strong foundation in infrastructure and operations with security integrated into systems ownership.

• Experience in a high-stakes environment where process and discipline were essential.

• Ability to develop and expand capabilities with limited resources, emphasizing automation over headcount.

• Proficient in managing infrastructure, security, applications, and identity collectively.

• Hands-on skills in architecting controls, reviewing Terraform changes, and leading incident responses.

• Extensive GCP experience is highly preferred; substantial AWS or Azure experience may be considered.

• Familiarity with zero trust access, identity-centric security models, and modern SaaS estate management.

• Responsible ownership of a SOC 2, ISO 27001, or equivalent compliance program through audits.

• Quick to absorb context and become acclimated within weeks.

• High-energy, self-motivated, and persistent work ethic.

• Comfortable operating in a fast-paced, high-growth, remote-first environment.

• Must complete a national police history check and reference checks.

• Must possess unrestricted or otherwise valid working rights in Australia without requiring company visa sponsorship.

🏝️ Benefits

• Monthly Lifestyle subsidy aimed at financial, physical, and mental well-being.

• Work-from-home set-up allowance provided within the first three months.

• Annual Learning & Development allowance of $1500 USD.

• Annual leave/Paid Time Off (PTO) plus two additional UpGuardian leave days.

• 18 weeks of paid Parental Leave.

• Personal Leave Allowance, including sick and carer’s leave.

• Fully remote working environment without mandatory office attendance.

• Provision of top-spec laptops.

• Paid subscriptions for generative AI tools.

• Global technology employer with offices in Sydney and Hobart.