• Melbourne hybrid role, 3 days in office
• $200k incl. Super, report to CIO
• Growing national firm that recognises cyber

A leading national professional services firm is seeking a Cybersecurity Manager to lead its cyber function, strategy and maturity uplift. This is a broad, high-impact role suited to an aspiring CISO who enjoys operating across governance, technology risk, vendor management, cyber awareness, incident response and strategic uplift.

You will work closely with the CIO, guide internal technology teams, manage external security partners and help drive the organisation toward stronger ISO 27001 alignment, improved data governance and a more mature cyber posture.

About the role

• Lead the development and execution of the cybersecurity strategy, roadmap and maturity uplift program across the firm.
• Own cyber governance, technology risk management, security policies, control frameworks, reporting and the IT risk register.
• Drive ISO 27001 readiness, client cyber assessments, third-party risk reviews and information security input into tenders.
• Manage external security providers across SOC, SIEM, incident response, vulnerability management and cyber operations.
• Provide practical cyber guidance to infrastructure, engineering, application development and wider business stakeholders.
• Lead cyber awareness programs, phishing testing, incident response planning and key cyber improvement initiatives.

About you

• Strong GRC, technology risk and cyber governance experience, ideally gained in a broad cyber leadership role.
• Exposure to ISO 27001, NIST, Essential 8 or similar frameworks, with experience lifting cyber maturity.
• Commercial risk mindset, with the ability to interpret standards pragmatically and make business-aligned recommendations.
• Strong stakeholder management skills, including the ability to influence technical teams without direct reporting lines.
• Good working knowledge of Microsoft security technologies, vulnerability management and security operations tooling.
• Experience managing vendors, cyber uplift projects, assessments, incident response or cyber awareness programs.

Apply now to take ownership of a broad cybersecurity leadership role with a growing professional services firm that is investing in cyber maturity, governance and long-term capability.