Head of Enterprise Security

Lead the Enterprise Security team and strategy
- Utilise your expertise in modern identity solutions
- Join an organisation with a thriving culture centred around high performance and care

We're REA

With bold and ambitious goals,

REA Group

is changing the way the world experiences property. No matter where you're at on your property journey, we're here to help with every step - whether that's finding or financing your next home.

Our people are the key to our success. At the heart of everything we do, is a thriving culture centred around high performance and care. We are purpose driven and collaborative, which drives innovation and our ability to make a real impact. As such, we’re proud to have been named in

Australia’s “Top 5” Best Workplaces

two years in a row, as well as being recognised as a Best Workplace for Women.

Where the team fits in

Join a security team that sparks innovation, not just enforces rules. REA is set on becoming Australia's #1 tech company and leading property sector security team. We're building a world class team to get us there, and we need clever, imaginative people to make it a reality.

Security, Enterprise Technology and Workforce Identity (SETI) is part of REA’s Global Technology group, providing shared products and services to the wider organisation. The teams in SETI are responsible for making sure that our employees have the best possible technology experience and to make sure that our products are worthy of the trust of our consumers, customers, investors and staff. Given how heavily our employees rely on technology to get their jobs done, we are hugely important to the culture and outcomes of REA Group.

As the Head of Enterprise Security, you will be building endpoint and identity security that empowers our teams and feels effortless, your job is to lead the way. Think AI-driven defence, no more passwords, real zero trust, and endpoints that fix themselves—all designed to be smooth and obvious. We work in quick cycles, learn fast, and keep our security open and clear. The goal: engineer protection that’s so well-integrated it’s almost invisible, letting our teams build and ship without friction, knowing they're secure.

What the role is all about
- Keep our people, data, and internal systems safe from threats, enabling REA to operate securely.
- Ensure all company devices (laptops, desktops, servers, mobiles) are configured securely, patched, protected (EDR, MDM), and monitored.
- Develop safe practices for employee-owned devices (BYOD) to balance staff needs and company security.
- Partner with tech and platform teams to ensure robust security controls for our internal network, SaaS apps, and cloud infrastructure used by employees.
- Work with tech and business teams to embed security into the design and deployment of new internal systems and services.
- Lead and inspire specialists in IAM, endpoint security, and potentially other corporate security domains.
- Proactively identify, assess, and drive the mitigation of security risks within our corporate environment.
- Help REA employees understand their role in security and adopt best practices to protect company assets.
- Help ensure our enterprise security practices are compliant and auditable.
- Collaborate closely with business, tech and other security functions (SecOps, Product Security, Governance, Risk and Compliance) to ensure a cohesive security posture.
- Keep REA informed and prepared for evolving internal threats, vulnerabilities, and enterprise security technologies.
- Drive the successful and predictable delivery of our roadmaps by leading prioritisation, managing dependencies, and ensuring clear communication on progress.
- Cultivate a culture of continuous improvement by coaching your teams on delivery practices and collaborating with TPMs to align on larger programs.

Who we’re looking for
- You’ve built and run teams that protect internal systems, users, and data in a dynamic tech environment.
- Deep experience with modern identity solutions (e.g., Okta, Azure AD, SailPoint), MFA, SSO, PAM, identity governance, and access lifecycle management.
- You know how to secure diverse endpoints (Windows, macOS, Linux, mobile) using EDR, MDM, configuration management, and hardening best practices.
- Can design a future-proof enterprise security strategy and execute it effectively, balancing security needs with business agility.
- Builds strong partnerships with tech, product and across the business to integrate security seamlessly.
- Passionate about creating diverse, high-performing teams where different experiences and perspectives are leveraged for better security outcomes.
- Can articulate security risks, strategies, and requirements clearly to all levels, from technical teams to executive leadership.
- You think in terms of least privilege, micro-segmentation (where applicable), and continuous verification for internal resources.

The REA experience

The physical, mental, emotional and financial heal