Head of Group Cyber, Business Protect

**A new role = A new way to win together**:
**You belong at Coles Group where we look ahead, have a plan, and are up for the challenge. We learn and grow by taking career-defining opportunities and this one may just be your next.**

**About the team**
Technology is the backbone of our business. Every day, our team solves complex and meaningful problems. Those solutions help thousands of our fellow team members succeed and make millions of customers lives easier every day.
The security team at Coles is proud of their successful delivery of customer-focused solutions. There are a lot of exciting initiatives on the horizon as protecting our customers, team members and reputation is essential to being the most trusted retailer.

**About the role**

Directly reporting to our General Manager of Group Cyber & Identity, you will play an integral part in enabling a culture of cyber security and safety, to minimise cyber risk and major incidents. Via alignment to lines of business and deliver periodic supplier/staff and system business protect reporting to drive adequate action.

You will also:

- Via alignment to lines of business and deliver periodic supplier/staff and system business protect reporting to drive adequate action
- Ensure secure-by-design principles are baked into the SDLC for 100% strategic projects
- Communicate data security requirements to key stakeholders
- Promote and ensure all Group Cyber requests come via the Cyber Front Door
- Drive self-service initiatives by way of questionnaires, templates and how-to documents to increase stakeholder security knowledge and drive team efficiencies
- Track and report secure design team’s progress against scorecards
- Empower and coach secure design team members

**About you and your skills**

You will be an experience leader within security design with a passion for driving change, diversity, and delivery across the organisation.

You’ll also have:

- Extensive Cyber Security experience working with Cyber management frameworks, including ISO, PCI-DSS and NIST
- Experience managing and coaching a team of highly skilled Cyber Security specialists
- Broad experience across multiple Security domains including cryptographic systems, identity and access management systems, network design, firewall management, web technologies, cloud computing technologies, regulatory and compliance requirements (e.g. PCI-DSS, Privacy Legislation)
- Experienced in tracking team capacity and reporting of recoverability targets against actuals
- Understanding of Cyber Security policies and standards, and security requirements across the systems lifecycle
- Reporting to senior management concerning residual risk, vulnerabilities and other security exposures, including misuse of information assets and non-compliance
- Influencer and sharp communicator who builds rapport with key stakeholders
- Ability to develop and enable Secure Design Strategy
- Strong written and verbal communication skills
- Excellent analytical and problem resolution skills
- Ability to attract, hire, retain and motivate Cyber Security talent
- Managing diverse and creating high performing teams
- In-depth knowledge and understanding of cyber risk concepts and principles

With us it’s not about the discounts (although you do get those), it’s about joining a team where your wellbeing and professional development is our investment and celebrating your contributions is the norm. And because everyone leads unique lives, we offer flexible work, additional leave and parental leave entitlements.

Job ID: 124619

Employment Type: Full time

LI-MJ22