Cybersecurity Lead

This is a fully remote position, open to applicants in Philippines.

📋 Description

• Establish and oversee the cybersecurity strategy, maturity roadmap, and investment priorities for the group.

• Define security standards applicable to IT, regional providers, and managed service providers.

• Manage the cyber risk register, control framework, and the Essential Eight maturity programme.

• Facilitate measurable progress towards target maturity and communicate security posture and risks to executives and the board.

• Outline security architecture principles across identity, endpoint, network, cloud, and corporate IT/OT interfaces.

• Integrate security into environmental design and change governance processes.

• Lead the incident response framework and manage responses to major incidents.

• Coordinate efforts among analysts, Arctic Wolf, IT teams, and business units during incidents.

• Conduct post-incident reviews and implement resulting enhancements.

• Establish and ensure security requirements for managed service providers and regional providers.

• Evaluate and mitigate risks associated with operational technology and plant networks.

• Manage relationships and roadmap for the security toolset, including Microsoft Defender and Arctic Wolf.

• Provide guidance on security implications related to major programmes, including the D365 rollout.

• Supervise and develop the IT Security Analyst.

• Foster security awareness and enhance organizational security maturity and culture.

• Lead a two-person security function while ensuring a clear distinction between strategic security direction and daily operations.

⛳️ Requirements

• Extensive experience in a senior cybersecurity position—security manager, lead, or equivalent—focused on strategy, governance, and risk, rather than just operations.

• Over 8 years of experience in cybersecurity, with multiple years in leadership or strategic roles.

• Demonstrated ownership of a security framework and maturity programme (such as Essential Eight, NIST, ISO 27001, or similar).

• Proven track record of measurable advancements and reporting to executives or the board.

• Strong expertise in securing Microsoft enterprise environments, including Defender, Entra ID, and Microsoft 365.

• Experience collaborating with a managed SOC or MDR provider like Arctic Wolf.

• Proven experience managing cyber risk in a complex, multi-site, or multi-country organization.

• Ability to prioritize risks in alignment with business realities.

• Proficient in engaging with executives, auditors, and the business, translating technical risks into actionable decisions.

• Capable of maintaining security standards under operational pressures.

• Experience or genuine interest in operational technology (OT) and security in industrial environments.

• Experience in manufacturing, industrial, or critical-infrastructure security is desirable.

• Senior security certifications such as CISSP or CISM are desirable.

• Experience steering security through a significant transformation or ERP programme is desirable.

• Familiarity with ITSM-integrated security operations such as Freshservice is desirable.

🏝️ Benefits

• Remote work flexibility.

• Monday to Friday, 7:00 AM – 4:00 PM PHT (with adjustments for daylight saving time).

• Health Maintenance Organization (HMO) coverage for 2 dependents and medical reimbursements.

• Government-mandated benefits.

• Opportunities to collaborate with leading companies in Australia and beyond.

• Training programmes aimed at career development.

• Engaging company outings, team activities, and wellness sessions.

• Supportive and inclusive workplace culture.

• Dedicated managers who prioritize your growth and success.

• Competitive compensation and benefits package.

• Additional entitlements.

• Structured career development programmes.

• People-first culture focused on stability, growth, and employee well-being.