[Hiring] Cybersecurity Lead @Twoconnect

Role Description

We are seeking an experienced Cybersecurity Lead to oversee cybersecurity strategy, governance and risk for a global manufacturing and engineering organisation. This senior leadership role will drive security standards, manage the cyber risk framework, and guide security improvements across a complex, multi-country IT and operational technology environment.

• Define and own the group's cyber security strategy, maturity roadmap and investment priorities, aligned to the business and its risk appetite.
• Set the standards that IT, regional providers and MSPs must meet.
• Own the cyber risk register, the control framework and the Essential Eight maturity programme.
• Drive measurable improvement against an agreed target maturity, and report posture and risk clearly to executives and the board.
• Define security architecture principles and requirements across identity, endpoint, network, cloud, and the boundary between corporate IT and operational technology (OT) at manufacturing sites.
• Embed security into how the environment is designed and how change is governed.
• Own the incident response framework and lead major-incident response, coordinating the analyst, Arctic Wolf, IT teams and the business.
• Own post-incident review and the improvements that follow.
• Set and assure the security requirements for MSPs and regional providers.
• Lead the assessment and risk reduction of operational technology and plant networks.
• Own the relationship and roadmap for the security toolset (Microsoft Defender, Arctic Wolf and related).
• Ensure the investment delivers measurable risk reduction.
• Advise on security implications of major programmes including the D365 rollout.
• Lead and develop the IT Security Analyst, build security awareness across the business, and raise the organisation's overall security maturity and culture.
• Lead a two-person security function comprising this strategic lead role and an IT Security Analyst who handles hands-on monitoring, investigation and remediation.
• Maintain a clear separation between setting and owning the security direction and executing it day to day.
• Set the standard and own the risk; the function below you delivers against it.

Qualifications

• Significant experience in a senior cybersecurity role - security manager, lead, or equivalent - owning strategy, governance and risk, not solely operations.
• 8+ years in cybersecurity with several years in a leadership or strategic capacity.
• Proven ownership of a security framework and maturity programme (Essential Eight, NIST, ISO 27001 or equivalent).
• Strong grounding in securing Microsoft enterprise environments (Defender, Entra ID, Microsoft 365).
• Experience working with a managed SOC or MDR provider such as Arctic Wolf.
• Experience managing cyber risk across a complex, multi-site or multi-country organisation.
• Genuine capability to face executives, auditors and the business, translating technical risk into decisions.
• Experience of, or genuine appetite for, operational technology (OT) and industrial environment security is a strong advantage.

Requirements

• Manufacturing, industrial or critical-infrastructure security experience.
• Senior security certifications (CISSP, CISM, or equivalent).
• Experience leading security through a major transformation or ERP programme.
• Familiarity with ITSM-embedded security operations (Freshservice or similar).

Benefits

• Work from home.
• Mon - Fri 7:00 AM – 4:00 PM PHT (adjustments will be made for daylight saving time).
• HMO with 2 free dependents and medical reimbursements.
• Government-mandated benefits.
• Opportunities to work with leading companies in Australia and beyond.
• Training programmes for career development.
• Engaging company outings, team activities and wellness sessions.
• Supportive, inclusive culture.
• Dedicated managers focused on your growth and success.