You will play a critical role in developing and delivering the organisation's Information Security Architecture strategy, leading security capability uplift programs and ensuring security architecture aligns with business objectives, regulatory obligations and organisational risk appetite.
Working across identity, infrastructure, platforms, applications and data, you will lead the evolution of enterprise security capabilities including SOC/SIEM, IAM/IGA, Zero Trust and Microsoft security platforms. Your expertise will help deliver scalable, secure and compliant solutions while influencing strategic investment decisions and long-term cyber security direction.
Key Responsibilities
- Lead the development and delivery of the Information Security Architecture strategy, roadmap and security uplift programs.
- Provide strategic advice on cyber security risk, architecture direction and investment priorities to senior stakeholders and governance forums.
- Define, maintain and govern enterprise security architecture frameworks, standards and design patterns.
- Lead the design and evolution of SOC/SIEM, IAM/IGA, Zero Trust and Microsoft security platform architectures.
- Drive the Essential Eight maturity uplift program (ML1-ML3 and beyond).
- Ensure security-by-design principles are embedded across enterprise and solution architectures.
- Conduct and oversee enterprise security risk assessments, translating technical risks into business impacts.
- Influence stakeholders across architecture, delivery, operations and business units to achieve scalable security outcomes.
- Develop and maintain security policies, standards and governance artefacts.
- Contribute to broader cyber security initiatives including strategy, awareness, assurance and continuous capability improvement.
What You'll Need
- Be an experienced Information Security Architecture professional with the ability to lead enterprise-wide security initiatives.
- Bring strong strategic thinking, leadership and stakeholder engagement skills, with the ability to influence at senior levels.
- Relevant tertiary qualifications or equivalent industry experience.
- Industry certifications such as CISSP, CISM, SABSA or equivalent are highly regarded.
- Extensive experience designing and governing enterprise Information Security Architecture.
- Demonstrated experience leading complex enterprise programs with accountability for outcomes.
- Strong experience across multiple security domains including cloud, IAM/IGA, security operations, application security, infrastructure security or data security.
- Proven experience developing security policies, standards and control frameworks aligned to ISO 27001 and the Essential Eight.
- Ability to translate complex technical risks into meaningful business outcomes and strategic decisions.
Skills & Attributes
- Deep understanding of enterprise Information Security Architecture and security governance.
- Strong knowledge of enterprise security frameworks, architecture standards and security-by-design principles.
- Advanced problem-solving and decision-making capability across complex security environments.
- Excellent communication, negotiation and stakeholder management skills.
- Strong planning and organisational skills with the ability to deliver large, complex initiatives.
Want to hear more? Send me an email at hudson@versegroup.com.au or call me on 0485 001 398.
