{"id":1388702,"url":"https://alion.io/job/ghd-manager-cyber-defence-strategy","title":"Manager - Cyber Defence Strategy","company":{"id":1821071,"name":"GHD","domain":"ghd.com","url":"https://alion.io/company/ghd-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":78,"open_postings":101,"ghost_share":0,"stale_share":0.891,"repost_share":0,"time_to_fill_p50_days":29,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sydney, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":97000,"max_usd":238000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":617},"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Azure","optional":false},{"name":"FedRAMP","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"NIST CSF","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-07-23T03:56:52Z","employer_posted_date":"2026-07-23","last_verified_at":"2026-10-16T00:05:59Z","board_verified":true,"closed_at":null,"days_open":84,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":84},"description":"Organisations don't innovate, people do.\nWho are we looking for?\nWe're looking for a Manager of Cyber Defence Strategy and Operations to join our Information Systems team, based in either Sydney, Melbourne, or Brisbane.\nGHD is a global professional services company working across engineering, architecture, environment and advisory, helping our clients and communities meet the challenges of a changing world.\nOur Enterprise Strategy 2035, “We Master Technology,” places technology at the heart of how we deliver, and within Information Services & Technology (IS&T) our Cyber & Information Security function protects the organisation, our people and our clients. We are looking for a leader to own its strategy and its operational edge.\nAs Manager - Cyber Defence Strategy and Operations, you will own GHD’s enterprise cybersecurity strategy and day-to-day operational resilience, and be the person who represents our cyber risk posture to the Chief Technology Officer, the IS Leadership Team and the Board Risk Committee. You will build genuine specialist depth beneath the Security Operations Centre, set and enforce enterprise security standards, and govern the security of an AI-era threat surface. This is both a strategic role and an operational command role, for a leader who is as credible in the boardroom as in the incident bridge.\nWorking with an energetic and high performing team, this position offers a variety of work and will see you involved in:\nDevelop and own GHD’s multi-year cybersecurity strategy and target-state security architecture.\nRepresent GHD’s cyber risk posture to the CTO, the IS Leadership Team and the Board Risk Committee.\nBuild specialist sub-teams (security architecture, vulnerability management, cyber GRC) to relieve the SOC of non-response work and restore true follow-the-sun coverage.\nOwn the enterprise vulnerability-management programme and drive a measured remediation cadence with clear ownership.\nCommand incident response for significant events, coordinating IT, Legal, HR and Communications.\nDefine and govern the Zero Trust programme across GHD’s Azure, identity and endpoint estate.\nOwn GHD’s AI security posture: agentic systems, non-human identities and shadow AI.\nGovern CMMC Level 2 and FedRAMP readiness as a commercial enabler for US Federal client work.\nWhat you will bring to the team:\n12+ years in cyber security, including building and leading specialist sub-functions (not just running a single SOC), ideally in a large or global organisation.\nDeep expertise across security strategy, operations, threat intelligence, vulnerability management and architecture, spanning cloud (Azure), endpoint, network, identity, application and data.\nStrong Zero Trust and Microsoft security stack expertise (Defender, Sentinel, Entra ID, Purview).\nHands-on experience with regulatory frameworks: CMMC Level 2, FedRAMP, ASD Essential Eight, ISO 27001 and NIST CSF.\nA track record of taking an organisation through a regulatory certification, and of presenting cyber risk to executive or board-level audiences.\nIncident command experience, and the ability to set enterprise standards without creating adversarial relationships.\n Certifications: CISSP, CISM or equivalent (required); CMMC Registered Practitioner or Professional (highly desirable); Microsoft SC-100 or AZ-500 (desirable).\nWhy you’ll love this role:\nEnterprise cyber leadership reporting to the CTO, with direct Board Risk Committee visibility.\nA build mandate: shape the strategy, the architecture and a genuine specialist team, not just keep the lights on.\nSecurity as a growth lever, with CMMC and FedRAMP readiness opening US Federal client work.\nThe chance to define GHD’s AI security posture at a pivotal moment for the threat landscape.\nA global remit, central to Strategy 2035, “We Master Technology.”\nIf you want to lead cyber defence for a global organisation at a defining moment, we would love to hear from you. Apply now.\nGHD is an equal opportunity employer, and we want everyone to be able to fully participate in our recruitment process. We value a diverse workforce and an inclusive culture. We encourage applications from Aboriginal and Torres Strait Islander peoples and people of all identities.\nGHD embraces hybrid work arrangements to create a work environment focused on well-being, flexibility and productivity where GHD people can thrive, this supports the diverse needs of our workforce while balancing the benefits of remote working with the value of face-to-face collaboration in the office.","description_format":"text","description_chars":4533,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Energy & Utilities","Information Security","Construction"],"lifecycle":[{"event":"open","at":"2026-09-28T11:07:33Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.405,"p_room":0.28,"age_days":84,"expected_fill_days":29,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/ghd-manager-cyber-defence-strategy","json_url":"https://alion.io/job/ghd-manager-cyber-defence-strategy.json","meta":{"generated_at":"2026-10-16T01:55:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3108,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1821071},"rest":"https://alion.io/mcp/rest/get_company?id=1821071"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fghd-manager-cyber-defence-strategy"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fghd-manager-cyber-defence-strategy"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fghd-manager-cyber-defence-strategy"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ghd-manager-cyber-defence-strategy\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fghd-manager-cyber-defence-strategy"}]}