Senior Leader

We are seeking an experienced information security professional to lead our team and drive strategic initiatives to protect our information assets.

The ideal candidate will have a strong understanding of information security frameworks, principles, practices, technologies, and standards.

This is a fantastic opportunity for a seasoned information security leader to play a key role in information security risk management, governance and reporting.

The Senior Manager, Information Security will be responsible for leading information security team operations and implementing initiatives to protect the Fund's information assets, infrastructure and member data.

Key responsibilities include:

• Developing and implementing an information security strategy aligned with business objectives, risk appetite, and regulatory requirements.
• Implementing and maintaining information security policies, standards, procedures, and guidelines.
• Conducting regular risk assessments, including third-party risk assessments, to identify potential information security risks and recommend risk treatment plans.
• Managing security incidents, including investigation, containment, and resolution, and implementing preventive measures to mitigate future risks.
• Collaborating with internal stakeholders, including technology, operations, risk and compliance teams, to ensure alignment of security initiatives with business goals and objectives.
• Providing guidance and support to internal teams on information security best practices, standards, and compliance requirements.
• Monitoring the design and operating effectiveness of information security controls to identify control gaps or weaknesses and recommend remediation measures.
• Staying abreast of emerging threats, vulnerabilities, and industry trends to proactively address potential security risks.
• Developing and delivering security awareness training and education programs for employees to promote a culture of information security awareness and compliance.
• Preparing regular reports and updates to senior management and relevant Committees on the status of information security initiatives, metrics, and incidents.

The ideal candidate will possess the following qualifications:

• Bachelor's degree in information security, computer science, or a related field. Relevant certifications such as CISSP, CISM, or CISA are desirable.
• Strong understanding of information security frameworks, principles, practices, technologies, and standards, such as NIST CSF and CPS 234.
• Proven experience in developing and implementing information security strategies, policies, and procedures.
• Sound knowledge of information security technologies, such as firewalls, SIEM, DLP, encryption, and endpoint security.
• Experience with cloud security principles and technologies, preferably Microsoft Azure, Microsoft 365, or AWS environment.
• Sound analytical and problem-solving skills, with the ability to assess complex security issues and recommend effective solutions.
• Effective leadership skills to mentor and coach cross-functional team members.
• Good communication and interpersonal skills, with the ability to effectively engage and collaborate with stakeholders at all levels of the organization.
• A commitment to professional development and continuous learning to stay current with industry trends and best practices.
• Understanding of governance processes for Boards & Committees.
• Experience in the financial services sector or regulated environments.

We offer a dynamic and supportive work environment, opportunities for career growth and development, and a competitive compensation package.

Applicants must have permanent Australian working rights and residency to be eligible for this role.

NGS Super is committed to creating a workplace that values diversity, equity, and respect for all individuals.