{"id":2309779,"url":"https://alion.io/job/afca-information-security-manager-scams","title":"Information Security Manager, Scams","company":{"id":1760318,"name":"Australian Financial Complaints Authority","domain":"afca.org.au","url":"https://alion.io/company/afca-org-au","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"contractor","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sydney, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":64000,"max_usd":188000,"period":"year","method":null,"sample_n":4493},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"IAM","optional":false},{"name":"SharePoint","optional":false}],"status":"live","first_seen_at":"2026-10-11T22:14:01Z","employer_posted_date":"2026-10-11","last_verified_at":"2026-10-13T03:18:43Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Fairness feels good\nMake a real impact at AFCA. Where fairness drives every decision. Help us deliver world-class, independent complaints resolution for Australians. As a not-for-profit and progressive financial ombudsman, we’re championing positive change. Achieving our purpose takes progressive thinking, accountability and resilience. At AFCA, our inclusive leadership values every voice. We offer our people flexible work options, thoughtful benefits and opportunities to deepen expertise. Flourish in a diverse, caring culture. Feel the difference of belonging to an organisation intentionally designed to put people first.\n Help build the security foundations of Australia's new scams dispute resolution framework.\nAt AFCA, we're preparing to deliver a world-first external dispute resolution scheme under the Scams Prevention Framework (SPF), providing Australians with an independent pathway to resolve scam-related complaints across banking, telecommunications and digital platforms.\nWe're looking for an experienced Information Security Manager to help design and implement the information security, governance and information management controls that will support this significant new function. This role sits at the intersection of cyber security, information governance, privacy, risk and business transformation, ensuring highly sensitive information is managed securely and responsibly from day one.\nThe opportunity\nReporting to the Chief Information Security Officer (CISO), you'll play a key role in assessing AFCA's capability to securely receive, handle, store, classify and share sensitive scams-related information.\nWorking across Technology, Legal, Risk, Privacy, Data Governance and business stakeholders, you'll identify risks and capability gaps, develop practical uplift recommendations and help implement secure operating practices that support both the Scams EDR Program and AFCA's broader information management maturity.\nThis is a rare opportunity to influence how a new national scheme manages sensitive information while helping shape security and governance practices across a rapidly evolving environment.\nThis role is a 12-month max-term contract initially\nWhat you'll be doing\nAssess current information security and information management capabilities across the Scams EDR Program.\nIdentify gaps in systems, processes, controls and information handling practices.\nDevelop and deliver security uplift recommendations and implementation roadmaps.\nSupport the design of secure information handling, classification and information lifecycle management practices.\nPartner with Privacy, Data Governance, Records Management, Technology Governance and Risk teams to strengthen security controls.\nProvide practical advice on document classification, access controls, secure information sharing and information governance.\nSupport assurance activities, control reviews, audits and evidence gathering.\nCreate security assessments, guidance materials, procedures and executive-level reports.\nDrive awareness and capability uplift across teams handling sensitive scams-related information.\n Essential\nDemonstrated experience in information security, information governance, cyber risk, security assurance or secure information handling. \nExperience assessing security controls and recommending practical uplift activities. \nStrong understanding of sensitive information handling, document classification, enterprise data classification, access control and secure information lifecycle management. \nExperience coordinating security requirements across multiple capability owners (e.g., data governance, IAM, privacy, records management, platform teams) without duplicating those capabilities. \nDemonstrated experience in information management, including information governance, records and document management, information lifecycle management, metadata, retention and disposal. \nExperience assessing information management practices and implementing practical improvements across business and technology functions. \nAbility to establish and support enterprise information management capability while working within existing governance and accountability structures. \nStrong written communication skills, including the ability to prepare clear procedures, assessment reports and executive-level summaries. \nSound judgement, discretion and integrity when handling sensitive, confidential or restricted information. \nAbility to work in a developing program environment where requirements may evolve. \nFamiliarity with Microsoft 365 / SharePoint, DLP, access control, audit logging and document-management patterns. \nDesirable\nExperience in government, regulatory, intelligence, law enforcement, national security, financial crime, cyber security or critical infrastructure environments. \nExperience with enterprise data classification tooling, information governance platforms or DLP implementation. \nFamiliarity with Australian Government protective security expectations, classified information handling or secure information-sharing arrangements. \nRelevant certifications or qualifications in information security, cyber security, risk, governance, audit, privacy, protective security or technology. \n Gold AWEI Accreditation 2025 - Recognised for LGBTQ+ workplace inclusion.\nAccredited Family Friendly Workplace - Supporting work-life balance and inclusivity.\nHybrid working - Flexible arrangements with two days a week in our modern offices designed for collaboration and wellbeing.\nAdditional and inclusive leave options - Flexible public holidays, gender affirmation leave, women’s health leave, and bonus paid time off over the end of year holiday period.\nTo apply\nIf you’re passionate about fairness and believe your skills align with this role, we encourage you to apply even if you don’t meet every single criterion.\nWe welcome applications from people of all backgrounds, cultures, abilities, sexual orientations, and gender identities. If you require any accessibility support during the recruitment process, please reach out to our team at .\nWe believe fairness starts with people. That’s why we don’t use AI or automated tools to screen candidates. As a result, our processes may take a little longer, and we thank you for your patience.\nAbout AFCA\nThe Australian Financial Complaints Authority (AFCA) was established in 2018 as a private not-for-profit ombudsman service providing free, fair and independent help with financial disputes. The original team has grown to over 1600 dedicated professionals. Since 2018, AFCA has received more than 634,000 complaints, helping to secure $2.1 billion in compensation for consumers.\nAFCA is a 2026 Circle Back Initiative Employer - we are committed to responding to every applicant.","description_format":"text","description_chars":6783,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Flexible schedule","Hybrid work"],"hiring_locations":[{"name":"Australia","iso":"AU","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-12T00:41:32Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":20,"reasons":["conf:2","win:early"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/afca-information-security-manager-scams","json_url":"https://alion.io/job/afca-information-security-manager-scams.json","meta":{"generated_at":"2026-10-13T05:58:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9254,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1760318},"rest":"https://alion.io/mcp/rest/get_company?id=1760318"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fafca-information-security-manager-scams"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fafca-information-security-manager-scams"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fafca-information-security-manager-scams"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/afca-information-security-manager-scams\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fafca-information-security-manager-scams"}]}