Head of Security Architecture

**Location of position**: Sydney, Australia
**Employment Type**: Full Time

Healthcare is usually slow and boring. We believe in its potential to be exciting and entertaining. But changing the healthcare experience is hard - and we're gonna need all the help we can get

**About Eucalyptus**

**Eucalyptus** (or 'Euc' for short) is an Australian founded digital healthcare company that is on a mission to solve the world's biggest healthcare challenges - think fertility, and behavioural change around chronic conditions such as weight loss, diabetes, and mental health.

Founded in Australia in 2019, we have now helped over 500K patients globally by combining technology, design and operational excellence to help patients access the best clinical support when they need it - wherever they are.

Our 4 brands (Juniper, Pilot, Kin & Software) focus heavily on personalising the experience for different demographics and are powered by a growing team across 5 countries (Australia, UK, Germany, Japan, and the Philippines).

We've raised over AUD$140M in funding from Australia and Silicon Valley investors who were early backers of Uber, Canva and AirBnb. With plans to launch into more markets, retail stores, and tackle new health conditions.

We're looking to continue building our team of executional weapons who are passionate about healthcare, aren't afraid to work hard, and invest in others through direct and honest feedback. This approach enables us to make the most impactful changes to improve the health of millions of patients globally.

**About the role (What you'll be doing)**

The **Head of Security Architecture (Trust & Security)** will lead our Trust Team (IT and Cybersecurity) at Eucalyptus and contribute to building and maintaining a secure, reliable, and global digital health platform. You will have overall responsibility for the global security and IT functions at Eucalyptus and will lead a team of 8 professionals in Sydney and Manila.

We've grown (exponentially) in the last three years and expanded into the UK, Germany and Japan. We have a custom-built web app and mobile app that services hundreds of thousands of people. But as a digital health provider, we need to ensure that we provide a reliable service and keep our patients' data safe.

This means we're looking for someone who has a generalist IT/InfoSec mindset, can champion IT and security at Euc through system design, architecture and effective communication, and is able to partner closely with stakeholders, the team and with vendors.

We're looking for someone who is as passionate as us about building an iconic healthcare business. You must have a high ownership mentality and the ability to take on responsibilities for goals and outcomes. Experience or desire to work in a fast-pace tech environment highly appreciated.

This role reports directly to the CTO. It's a full-time position, based in Sydney, Australia with the flexibility to work from home 2 days a week (Wednesday / Thursday).

**Here is what success might look like in your first 6-12 months**:

- **Partner with stakeholders**: Partner with stakeholders to understand current business objectives, IT architecture and security posture at Eucalyptus.
- **Understand our requirements**: Understand our regulatory, security and internal requirements for our IT architecture and cybersecurity posture (eg, ISO27001, DTAC, CyberEssentials, etc.)
- **Identify systems and controls**: Identify our IT/cybersecurity systems and controls and how they work to promote a more reliable and secure digital health platform/service.
- **Align our Trust Team Objectives with that of the business**: Align our IT and cybersecurity strategies with the current business objectives
- **Own the internal IT architecture**: Take ownership over the internal IT architecture at Eucalyptus and make effective decisions by balancing the benefits (value-add) against the costs (security, reliability, financial)
- **Manage technology cost**: Take ownership over technology cost at Eucalyptus and manage vendors and spend against Eucalyptus needs
- **Prepare for an incident**: Understand our Incident Response Plan and process and understand your role within that process.
- **Team management**: Lead the Trust Team in an effective manner to drive a strong IT and cybersecurity function at Eucalyptus

**About you (Who you are)**
- Have at least 4 years of experience in IT, InfoSec or Cybersecurity, particularly in cloud-native or cloud-based technology stacks
- Understand the need to deliver security outcomes that are balanced against cost and efficiency gains.
- Understand the structure, scope and requirements for a successful IT and cybersecurity function.
- Have experience with managing and operating teams
- Have excellent written and verbal communication skills, particularly in communicating technical concepts to non-technical audiences.
- Be able to work with others effectively and seamlessly to achieve team objectives
- Have an abilit