ICT Security & Risk Manager
About The Position
Goodstart is seeking an experienced ICT Security & Risk Manager to lead its cybersecurity, risk, and compliance function. The role involves ensuring the technology environment remains secure, resilient, and aligned with industry best practices. Reporting to the Chief Information Officer, the successful candidate will shape and deliver Goodstart's ICT Security Strategy, support initiatives focused on infrastructure resilience, cyber maturity, and data protection. This position will involve collaboration with technology partners and vendors, driving security initiatives, and preparing for future compliance requirements like ISO 27001 certification and emerging regulatory reforms. This is an opportunity to influence enterprise-wide security practices, lead a team, and contribute to strategic initiatives protecting the information and wellbeing of children, families, and employees across Australia. The ideal candidate will possess a blend of strong technical and risk expertise with a pragmatic, hands-on approach, capable of strategy development, stakeholder engagement, and operational support.
Requirements
- Relevant tertiary qualifications in Information Technology, Cybersecurity, Information Systems, Risk Management or a related discipline, or equivalent industry experience.
- 5 + years of leadership experience within cybersecurity, technology risk, security operations or ICT environments.
- Strong experience managing cybersecurity risk, security controls, vulnerability management, security operations and incident response activities.
- Hands-on experience with Microsoft security technologies including Microsoft 365, Entra ID, Azure, Defender and Intune.
- Experience working with Security Operations Centre (SOC) capabilities, SIEM platforms, vulnerability management and threat monitoring processes.
- Strong understanding of recognised security frameworks and standards, including ISO 27001, NIST, CIS Controls and the ASD Essential Eight.
- Proven experience working with external technology vendors, managed service providers and complex technology contracts.
- The ability to communicate complex technical concepts clearly and influence stakeholders at all levels of the organisation.
- A collaborative, values-driven leadership style with a willingness to roll up your sleeves and contribute wherever needed.
- A genuine alignment with Goodstart's purpose, values and commitment to supporting children and families.
- Current QLD Blue Card (or willing to obtain one).
Nice To Haves
- Industry certifications such as CISSP, CISM, CRISC, Security+ or similar will be highly regarded.
Responsibilities
- Lead the delivery of Goodstart's ICT Security Strategy and Security Roadmap, strengthening cybersecurity capabilities across the organisation.
- Drive security and risk initiatives as part of Goodstart's Resilient Technology Fund (RTF) program, focused on infrastructure stability, cyber resilience and data protection.
- Oversee security operations, vulnerability management, threat monitoring, incident response and cyber resilience activities.
- Maintain ICT risk registers, treatment plans and reporting frameworks, ensuring alignment with ISO 27001, NIST, CIS Controls and Essential Eight standards.
- Partner with key technology vendors and service providers to ensure secure, reliable and value-for-money services.
- Support Goodstart's journey towards ISO 27001 certification while ensuring readiness for evolving regulatory and child safety requirements.
- Lead audit, compliance, assurance, business continuity and disaster recovery activities, ensuring security controls remain effective and fit for purpose.
- Manage and develop a high-performing Security & Risk team while fostering a strong culture of cyber awareness and accountability across the organisation.
Benefits
- Flexible work arrangements
- Salary packaging benefits available through AccessPay (eligibility applies)
- Access to discounted childcare (up to 15%)
- Fitness Passport – access to gyms and pools for you and your family at a heavily discounted price
- Discounted health care and access to employee wellbeing program with BUPA
- Exclusive discounts on travel, gym memberships, Apple and Dell products, and more
- Free annual flu shot (optional)
- Option to purchase extra leave for even greater work life balance
- First Nations Support and Cultural Leave
- Significant investment in your growth and development with support, tools, training and experiences
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
Education Level
Associate degree
