Cyber Security Manager

Build and lead the cyber security capability for a national retailer.

Our client is a well-established national retailer with more than 65 locations across Australia and thousands of employees. As the business continues to invest in technology, data and digital capability, they're creating their first dedicated Cyber Security Manager role to establish and lead their enterprise-wide security function.

Reporting to the Chief Technology Officer, this is a genuine greenfield opportunity to shape the organisation's cyber security strategy, governance and operational capability.

This isn't a traditional CISO role. Instead, we're looking for a hands-on security leader who can think strategically while remaining close to the operational detail—someone who can assess the current environment, prioritise risk, and build a practical security roadmap that delivers measurable outcomes.

Initially, you'll operate as an individual contributor with the opportunity to build a small cyber security team as the function matures.

About the role

You'll be responsible for establishing and embedding cyber security across the organisation, including:

• Developing and delivering the enterprise cyber security strategy and roadmap.
• Building governance frameworks, policies and security standards.
• Establishing enterprise-wide data governance and data classification, defining how information is managed, protected and classified across the business.
• Driving compliance initiatives across cyber security, privacy and information management.
• Leading Identity & Access Management initiatives, including expanding Single Sign-On (SSO), MFA and modern access controls across a complex technology environment.
• Assessing the current security posture and developing prioritised improvement plans across high, medium and long-term initiatives.
• Managing cyber risk, vulnerability management, incident response and third-party security.
• Embedding security into business projects and operational processes from the outset.
• Delivering security awareness, phishing education and cultural change programs across the organisation.
• Providing practical advice to executives and business stakeholders, translating technical risks into commercial outcomes.

About you

You'll bring experience across a broad range of cyber security disciplines and be comfortable operating across both strategy and execution.

You'll ideally have experience with:

• Building or maturing a cyber security capability.
• Data governance, data classification and information lifecycle management.
• Identity & Access Management, including SSO, MFA and privileged access.
• Cyber security governance and frameworks, including the ACSC Essential Eight.
• Risk management, compliance and security operations.
• Security awareness and organisational change.
• Vendor and third-party risk management.

Most importantly, you're an excellent communicator who can influence stakeholders across all levels of the business. You know how to prioritise competing risks, balance security with commercial outcomes, and build trust with both technical and non-technical teams.

Why apply?

This is an opportunity to make a genuine enterprise-wide impact. You'll have executive support, significant autonomy and the chance to build a security function from the ground up for one of Australia's leading national retailers.

If you're looking for a role where you can shape strategy, influence culture and leave a lasting legacy, we'd love to hear from you.

Please apply with current resume in Microsoft Word format only (.doc or .docx). If you would like to have a confidential discussion, please contact Alex Coroneo at alex.coroneo@davidsonwp.com. Want to know more about Davidson? Visit us at www.davidsonwp.com