Security Operations Lead

Scyne are public purpose specialists uniting people, ideas and potential to shape solutions. Our vision is to be the public purpose specialists, supporting organisations to build more resilient, secure, equitable and prosperous communities. We strive to support a stronger Australia – one purpose, one practice. We are an independent, contemporary, national business with the scale and capabilities to deliver meaningful impact for the public purpose; through serving the public sector, public purpose organisations or projects, and organisations operating in defined public purpose sectors. We are setting a new standard for public purpose advisory services in Australia, with rigorous governance and accountability frameworks and standards and a clear commitment to ethical leadership. We are governed by a Board including an independent Chair, a staff appointed director and two additional non-executive independent directors alongside two directors from the majority shareholder. The Security Operations Lead is responsible for enabling effective day-to-day cyber security operations. The role leads operational activities across incident response, vulnerability management, security monitoring, provider management and control remediation while supporting the CISO and Technology teams to reduce cyber risk and improve operational resilience. Key responsibilities: - Security Operations & SOC Management: Lead day-to-day operations (alert triage, incident containment, runbook maintenance) and manage the operating rhythm, service levels, and escalation paths with the SOC/MSP. - Vulnerability & Control Monitoring: Monitor key security controls across identity, endpoint, cloud, and networks; track and prioritize high-risk vulnerabilities, ensuring clear ownership and timely remediation. - Cyber Risk, Governance & Audit Alignment: Maintain the operational risk register, coordinate evidence collection for ISO 27001, audit, and Line 1/2/3 assurance activities, and manage formal risk acceptance/exception workflows. - Cloud, Data & AI Security Monitoring: Partner with Engineering, Technology and business stakeholders to embed and operationalise cloud, data, software and AI security controls across development and CI/CD processes, supporting monitoring, response and remediation activities for data security posture, misconfigurations, risky access, data exposure and other security risks while ensuring controls are practical, effective and integrated into day-to-day operations. - Operational Reporting & CISO Advisory: Deliver clear operational reporting to the CISO on security posture, incident trends, vulnerability remediation progress, and third-party provider performance. - Stakeholder Engagement & Capability Building: Partner closely with Technology teams and business units to embed workable security controls, lead cyber awareness/phishing initiatives, and foster shared ownership of cyber risks. - Hands-on experience leading or coordinating security operations, incident response, SOC, vulnerability management, or cyber defence activities. - Experience using Microsoft security tools or similar platforms for alert triage, investigation, monitoring, reporting, and control improvement. - Hands-on experience with DevSecOps practices, CI/CD security tooling, and application security testing. - Experience improving operational processes, runbooks, playbooks, dashboards, service levels, or security reporting. - Strong understanding of incident response, threat detection, vulnerability management, identity security, endpoint security, cloud security, and security monitoring. - Experience managing SOC/MSP providers, including performance reviews, escalations, incident quality, remediation follow-up, and SLA accountability. - Ability to explain incidents, vulnerabilities, control gaps, and operational risks in simple business language. - Working knowledge of common security frameworks and benchmarks, such as NIST CSF, CIS Controls, ISO 27001, Essential Eight, MITRE ATT&CK, or cloud security guidance. - Experience supporting detection, monitoring, or response for cloud, data protection, insider risk, or AI security use cases. - Relevant certifications, such as CISSP, CISM, SANS/GIAC, or cloud security certifications would be highly regarded. Benefits - Market leading Parental Leave: Allows either carer to take 26 weeks of leave, flexibly, until a child is two years of age. A six-month minimum service requirement for new starters applies. We also make full superannuation contributions for up to 12 months (including unpaid parental leave). - Flexible working: Our people have the autonomy to choose where and when they work so they can integrate their professional and personal lives, finding the right balance that fuels their growth, wellbeing, engagement and productivity. If it works for them, their teams, and their clients, it works for us. - Additional leave: Includes Birthday leave, First Nations Cultural Leave, Floating Public Holidays, Leave+ (purchased leave up to 12 weeks), Study Leave, Volunteering Leave, and more! - Smart device reimbursement: Working flexibly means accessing the information you need on the go. That’s why we help pay for your smartphone or tablet, claiming up to $60 a month towards your bill. - Wellness and Lifestyle benefits: We’ll give you $295 a year to spend on items or activities that support your wellness, and up to $205 a year to support your balanced lifestyle. - Sonder: A digital care platform that empowers people to actively take control of their wellbeing to live well and perform at their best, free to Scyne Employees and their immediate family members. Interested in working together or want to find out more? If you're collaborative in nature, curious and keen to work in a high-performing team to drive meaningful change for clients, then you should apply today. Scyne Advisory: Our Commitment to Diversity, Inclusion, and Impact We champion a culture of diversity, equity, and inclusion, recognising that collective intelligence and varied perspectives are crucial for delivering exceptional outcomes for Australia's public sector. We actively encourage applications from individuals within marginalised and historically underrepresented communities. Please advise us if you require any adjustments during the application process. We are deeply passionate about improving outcomes for First Peoples, collaborating with government and community sectors on programs focused on First Nations clients, consumers, and communities. We highly value the profound knowledge, insights, capabilities, strength, resilience, and cultural competence of First Peoples. Our recruitment process is fair and inclusive, seeking a skilled and diverse workforce reflective of the communities we serve. We consider ability, performance, potential, and alignment with our values, valuing unique experiences and contributions. Background checks and, if required, valid Commonwealth security clearances are part of our process. For recruitment partners, please note that candidate submissions from search firms and recruiters are only accepted in alignment with a pre-existing, signed agreement for a specific position. Unsolicited resumes will not incur financial obligation.