About the Company
Our client is a fast-growing, ASX-listed leader in the Energy & Resources sector with operations across Australian and global sites. With technology at the core of their operations, they are now investing heavily in building a dedicated cybersecurity capability to uplift their maturity and embed security as a true business enabler.

About the Role
This is a newly created leadership role within a small but critical cybersecurity function. You will have full accountability for shaping and driving security across IT and OT environments, protecting a global workforce of around 3,000 employees.

Reporting directly to the CIO, your immediate focus will be on uplifting standards, maturing processes, and developing a multi-year security strategy that aligns with the organisation's growth ambitions.

Culture & Benefits

• Be part of a scale-up journey in a high-growth ASX-listed business
• Full ownership of security strategy, operations, and delivery
• Nimble function where you can make a real impact
• Exposure across a broad mix of IT and OT systems in critical infrastructure

Key Responsibilities

• Lead and manage the end-to-end Security function
• Build and mentor a small, high-performing team
• Ensure compliance with relevant security and regulatory standards
• Drive uplift in cybersecurity maturity across IT and OT environments
• Partner with senior stakeholders to embed security best practices and controls
• Develop and execute a multi-year cybersecurity strategy

Skills & Experience
To succeed in this role, you will bring:

• Proven cybersecurity leadership experience (5+ years) with a strong technical foundation
• Track record of building and executing multi-year strategies
• Broad knowledge of security platforms, tools, and frameworks
• Experience managing budgets and vendor engagement/management
• Industry exposure in heavy industry, energy, mining, or logistics (highly regarded)
• Exceptional communication skills with the ability to influence at all levels
  Relevant industry certifications (CISSP, CISM, CISA, etc.) are highly regarded