Chief Information Security Officer (CISO)

Sydney Airport

22h

About The Position

Sydney Airport operates one of Australia's most important pieces of critical infrastructure. As Chief Information Security Officer (CISO), you will lead the organisation's Cyber Security function, protecting critical systems, data and technology environments while helping ensure the ongoing resilience of airport operations. The role leads and executes Sydney Airport's enterprise cyber security strategy and acts as a trusted advisor to Executive leaders and the Board on cyber security, resilience and risk. With a dotted line to the COO, you will lead an established team of cyber security professionals and play a critical role in strengthening cyber resilience across a complex operational environment. This is an opportunity to lead the next stage of Sydney Airport's cyber maturity journey, driving execution, developing capability and delivering meaningful outcomes while balancing strategic priorities with practical delivery.

Requirements

Significant cyber security, information security or technology risk leadership experience within complex, highly regulated or critical infrastructure environments.
Proven experience leading enterprise cyber security operations, governance, risk management and resilience programs.
A track record of driving cyber maturity uplift, remediation programs, assurance activities and control effectiveness initiatives.
Experience managing regulatory obligations, cyber compliance requirements and industry security frameworks, including exposure to Critical Infrastructure obligations and ISO27001.
Demonstrated experience presenting cyber security, risk and resilience matters to Executive Committees, Board Committees and Boards.
Strong leadership capability with experience building, developing and leading high-performing multidisciplinary cyber security teams.
Sound judgement, resilience and the ability to lead effectively during cyber incidents, crisis situations and high-pressure environments.
Relevant tertiary qualifications in Cyber Security, Information Technology or a related discipline.

Nice To Haves

CISSP, CISM, CRISC or equivalent certifications will be highly regarded.

Responsibilities

Lead and develop Sydney Airport's Cyber Security function, fostering a high-performing culture and strengthening organisational capability.
Execute cyber security initiatives aligned to Sydney Airport's strategic objectives, risk appetite and resilience goals.
Oversee cyber security operations, cyber risk management, resilience and control effectiveness across the organisation.
Lead cyber assurance activities, including audits, independent testing programs, risk remediation and regulatory obligations.
Partner with business and operational leaders to embed cyber risk management into decision-making and enterprise planning.
Identify emerging cyber and regulatory risks, providing strategic advice and recommendations to executive leadership and the Board.
Prepare and present cyber security reporting, resilience metrics and risk insights to the Executive Leadership Team, Board Committees and Board.
Champion a pragmatic and risk-based approach to security, ensuring outcomes support both resilience and operational effectiveness.