search Browse Jobs
Manager - Cyber Defence StrategyGHD · Greater Brisbane Area
GHD logo

GHD

company page ↗ Visa Sponsoring Company

Manager - Cyber Defence Strategy

✓ This company has sponsored visas before. The posting doesn't say so, but it's still worth applying.

🗓️ Posted 2026-09-07 Greater Brisbane Area Full-time Hybrid ICT
💰 Salary Not shared 📊 Market A$10,833–A$15,000/mo

About the Company

GHD is a global professional services company working across engineering, architecture, environment and advisory, helping our clients and communities meet the challenges of a changing world. Our Enterprise Strategy 2035, "We Master Technology," places technology at the heart of how we deliver, and within Information Services & Technology (IS&T) our Cyber & Information Security function protects the organisation, our people and our clients.

About the Job

We're looking for a Manager of Cyber Defence Strategy and Operations to join our Information Systems team, based in either Sydney, Melbourne, or Brisbane. As Manager - Cyber Defence Strategy and Operations, you will own GHD's enterprise cybersecurity strategy and day-to-day operational resilience, and be the person who represents our cyber risk posture to the Chief Technology Officer, the IS Leadership Team and the Board Risk Committee. This is both a strategic role and an operational command role, for a leader who is as credible in the boardroom as in the incident bridge.

Role & Responsibilities

  • ● Develop and own GHD's multi-year cybersecurity strategy and target-state security architecture.
  • ● Represent GHD's cyber risk posture to the CTO, the IS Leadership Team and the Board Risk Committee.
  • ● Build specialist sub-teams to relieve the SOC of non-response work and restore true follow-the-sun coverage.
  • ● Own the enterprise vulnerability-management programme and drive a measured remediation cadence with clear ownership.
  • ● Command incident response for significant events, coordinating IT, Legal, HR and Communications.
  • ● Define and govern the Zero Trust programme across GHD's Azure, identity and endpoint estate.
  • ● Own GHD's AI security posture: agentic systems, non-human identities and shadow AI.
  • ● Govern CMMC Level 2 and FedRAMP readiness as a commercial enabler for US Federal client work.

Requirements

Certifications

  • ● A track record of taking an organisation through a regulatory certification, and of presenting cyber risk to executive or board-level audiences.
  • ● Certifications: CISSP, CISM or equivalent; CMMC Registered Practitioner or Professional; Microsoft SC-100 or AZ-500.

Experience

  • ● 12+ years in cyber security, including building and leading specialist sub-functions, ideally in a large or global organisation.
  • ● Hands-on experience with regulatory frameworks: CMMC Level 2, FedRAMP, ASD Essential Eight, ISO 27001 and NIST CSF.

Skills

  • ● Deep expertise across security strategy, operations, threat intelligence, vulnerability management and architecture, spanning cloud, endpoint, network, identity, application and data.
  • ● Strong Zero Trust and Microsoft security stack expertise.
  • ● Incident command experience, and the ability to set enterprise standards without creating adversarial relationships.

Benefits

  • ● Working with an energetic and high performing team.
  • ● Variety of work.