Chief Information Security Officer – CISO

This is a fully remote position, open to applicants in Australia.

📋 Description

• Direct the organization's Cyber Security division to safeguard essential systems, data, and technological environments.

• Implement Sydney Airport's comprehensive cyber security strategy.

• Serve as a trusted advisor to Executive leaders and the Board regarding cyber security, resilience, and risk management.

• Lead a proficient team of cyber security experts, with a reporting line to the COO.

• Cultivate a high-performance culture and enhance organizational capabilities.

• Carry out cyber security initiatives that align with strategic objectives, risk appetite, and resilience targets.

• Supervise cyber security operations, manage cyber risks, and assess control effectiveness and resilience.

• Oversee cyber assurance activities, including audits, independent testing programs, risk remediation, and regulatory compliance.

• Collaborate with business and operational leaders to integrate cyber risk management into decision-making and enterprise planning.

• Identify new cyber and regulatory risks and provide strategic guidance to executive leadership and the Board.

• Prepare and deliver cyber security reports, resilience metrics, and risk insights to the Executive Leadership Team, Board Committees, and Board.

• Advocate for a pragmatic, risk-based security approach that supports resilience and operational efficiency.

⛳️ Requirements

• Extensive leadership experience in cyber security, information security, or technology risk within complex, highly regulated, or critical infrastructure settings.

• Demonstrated capability in leading enterprise cyber security operations, governance, risk management, and resilience initiatives.

• Proven history of enhancing cyber maturity, executing remediation programs, conducting assurance activities, and implementing control effectiveness strategies.

• Familiarity with managing regulatory obligations, cyber compliance requirements, and industry security frameworks.

• Knowledge of Critical Infrastructure obligations and ISO27001 standards.

• Experience in presenting cyber security, risk, and resilience topics to Executive Committees, Board Committees, and Boards.

• Background in building, developing, and leading high-performing multidisciplinary cyber security teams.

• Strong judgment, resilience, and the ability to lead during cyber incidents, crisis situations, and high-pressure environments.

• Relevant tertiary qualifications in Cyber Security, Information Technology, or a related field.

• CISSP, CISM, CRISC, or equivalent certifications are highly valued.

🏝️ Benefits

• Flexible culture and work practices.

• Employee benefits (specific benefits not detailed in the posting).

• Equal Opportunity Employer.