Information Security Officer

• A rewarding opportunity to make a real impact on heart health.
• Flexible hybrid working arrangements from any of our capital city offices.
• Enjoy generous salary packaging to boost your take-home pay.

About Us

Our vision is bold: by 2050, heart health will be achievable by everyone in Australia. Since 1959, the Heart Foundation has driven research, advocacy, and prevention to save lives. Join us and help create a future where every Australian can thrive.

Help Safeguard our Digital Future

As our Information Security Officer, you'll play a key role in protecting the Heart Foundation's data, systems, and reputation. You'll design and implement robust cyber security measures, lead risk assessments, and ensure compliance with privacy, governance, and regulatory standards.

From day one, you'll hit the ground running by supporting the implementation of PCI-DSS certification requirements - a critical project where your expertise will shape how we protect sensitive data and uphold the highest standards of assurance. Beyond this, you'll dive into a mix of exciting security initiatives and BAU responsibilities, from embedding privacy by design in projects to managing third-party risk and delivering organisation-wide awareness training.

You will have the opportunity to work flexibly, blending your time between home and the office (50/50 split).

What You'll Be Doing

• Lead the implementation of PCI-DSS certification requirements and maintain ongoing assurance to uphold compliance standards.
• Develop, implement and maintain security policies, procedures and standards that strengthen the organisation's cyber resilience.
• Monitor, detect and respond to security incidents and vulnerabilities, ensuring timely resolution and minimising risks.
• Conduct risk assessments and audits to identify, prioritise and mitigate information security risks across systems and vendors.
• Embed security and privacy by design into projects, technology initiatives and business operations.
• Provide organisation-wide training and awareness to uplift cyber security culture and practices.
• Report regularly on security posture, risks and compliance to guide decision-making and continuous improvement.

What You'll Bring

• A background in Information Security, Computer Science, or a related field
• Industry certifications (CISSP, CISM, CISA or similar); or the drive to work towards them
• Hands-on experience in cybersecurity, risk management and privacy compliance
• A solid grasp of security frameworks, standards, and regulatory requirements
• Familiarity with tools like SIEM, endpoint protection, vulnerability scanners, or identity management
• An understanding of data governance and privacy legislation
• Sharp analytical skills paired with clear, confident communication
• A collaborative approach, with the ability to influence and engage stakeholders
• Integrity, curiosity, and a genuine commitment to ethical conduct

Why Join Us?

At our heart, we are driven by purpose. Every day, we make a meaningful impact through our work, and we are committed to supporting our employees in achieving a healthy work-life balance.

We are dedicated to fostering a diverse, safe, and inclusive workplace. We actively seek to represent the communities we serve and recognise the invaluable skills, knowledge, and perspectives a diverse team brings. We strongly encourage applications from Aboriginal and Torres Strait Islander people and individuals from all backgrounds.

What We Offer:

• Salary packaging to help you make the most of your earnings.
• Flexible work-from-home options – up to 50% of your week.
• A supportive and inclusive workplace culture where your contributions are valued.
• Additional gifted leave during the Christmas shutdown period.
• Wellbeing programs and initiatives to support your personal and professional growth.

Ready to Apply?

If you're ready to make a real difference, we'd love to hear from you Submit your application online or contact Stephanie at if you require any workplace adjustments.

This advertisement is expected to close at 11:59pm on Sunday, 21 September. However, if we receive a large response we might close it early, so please don't delay If you're reading this and the closing date is in the past, that means we're still accepting applications.

All employment offers are subject to pre-employment checks, including National criminal history check, Working with Children Check, and any other relevant background checks.