Information Security Manager

Planlogic supports Australia’s financial advice industry through technology-enabled financial planning support services. We’re looking for an Information Security Manager to lead and coordinate information security governance across the organisation, supporting the effective operation and continual improvement of our Information Security Management System (ISMS). The role will work closely with leadership and stakeholders across our international operations to manage security risks, compliance, assurance and information protection.

Core Duties & Responsibilities

• Lead and maintain the organisation’s information security governance framework and ISMS.
• Coordinate information security risk assessments, risk treatment and ongoing risk monitoring.
• Oversee ISO/IEC 27001 compliance, audits, certification activities and corrective actions.
• Maintain oversight of security policies, controls, risk registers and the Statement of Applicability.
• Provide governance oversight across security monitoring, vulnerability management, access, endpoint, network, cloud and physical security controls.
• Coordinate information security incident response, business continuity and disaster recovery activities.
• Support data protection, privacy governance and the secure handling of sensitive information.
• Coordinate security awareness, training and communication across the organisation.
• Manage security due diligence and assurance activities for relevant suppliers and third parties.
• Report significant security risks, incidents, findings and ISMS performance to senior leadership.

What We're Looking For :

• Substantial professional experience in information security, cybersecurity, technology risk, audit or compliance, with senior-level governance experience.
• Practical experience implementing, maintaining or auditing ISO/IEC 27001-aligned management systems.
• Strong knowledge of risk assessment, policy governance, incident management, business continuity and supplier assurance.
• Experience supporting international clients or multi-jurisdiction operations, preferably in financial services, BPO, KPO or professional services.
• Strong written and verbal communication, professional judgement and stakeholder management skills.
• A degree or postgraduate qualification in information security, cybersecurity, IT, risk, audit or a related field is desirable.

•ISO/IEC 27001 Lead Auditor/Lead Implementer, CISSP, CISM, CRISC, CISA, cloud security or Microsoft security or equivalent certifications are desirable.