Chief Information Security Officer

Chief Information Security Officer (CISO) | MelbourneConfidential Executive Search | Cyber Security | Application SecuritySecureTalent has been exclusively engaged to appoint a Chief Information Security Officer for a growing technology and cyber security organisation in Melbourne.Reporting directly to the CEO and joining the Executive Team, this is not a traditional governance-led CISO role.We are looking for a technically credible security leader who can build and lead a dedicated Security function while operating comfortably across technical security, executive risk, assurance and customer engagement.The mandate:You will take ownership of the organisation's security strategy and build out capability across:Security research, vulnerability management and threat intelligenceApplication security, penetration testing and technical assuranceSecurity engineering, cloud security and incident responseISO 27001 / SOC 2 and the broader ISMSTechnology risk, compliance and internal auditGovernment security assurance, including IRAP / ISM / PSPFExecutive and Board-level cyber reportingBuilding and developing a high-performing technical security teamWhat we're looking for:You may currently be a CISO, Head of Cyber Security, Head of Security, Security Director or senior technical security leader ready for broader executive accountability.You'll ideally bring:Significant senior cyber security leadership experienceStrong technical foundations in AppSec, offensive security, penetration testing, vulnerability research, security engineering or architectureExperience building or materially transforming security functionsStrong ISO 27001 / ISMS, risk and assurance capabilityExecutive and Board-level stakeholder experienceThe technical credibility to lead security researchers, engineers and testing specialistsExperience across CVE discovery, security research, Red/Purple Teaming, threat intelligence and government assurance will be particularly highly regarded.This role will not suit someone whose recent experience has been predominantly GRC, policy and compliance.Further information regarding the organisation, mandate and package will be provided to suitably qualified candidates.