Head of Information Security

Application Deadline: 31 March 2025

Department: Cloud Infrastructure Engineering

Employment Type: Permanent - Full Time

Location: Australia

Reporting To: Jeff Inman

Description

As Head of Information Security you will be responsible for the design and execution of technical strategy and the implementation of security and operational controls across FluentCommerce. You will work closely with operational teams to define compliance requirements and develop security vision, roadmap, and priorities. Coordinating with Software and Platform engineering teams to meet organisational standards, evaluate risk, compliance, control assurance and promote user awareness.

About You

You’re a strong communicator passionate about Cyber Security who is experienced in engaging a broad group of stakeholders, from engineering and developers to external enterprise parties. You also are experienced at influencing and driving progress in a SaaS product company encompassing globally distributed teams and dynamic agile working environments.

Key Responsibilities:

Lead the development and design of the enterprise information security architecture, policies and encompassing security systems, people, and processes.
Responsible for the Security strategy, roadmap and budget including developing and delivering FluentCommerce evolving information security environment.
Own and drive the operational control compliance roadmap, including external auditor relationships and cadence.
Identifying and evaluating new and emerging security trends, innovations and threats and providing advice on recommended actions.
Maintain and develop current knowledge of tools and best-practices in advanced persistent threats related to forensics and incident response.
Maintain sales related security response catalogue and own client facing security responses, including participating in client facing discussions and working with enterprise client information security teams.
Lead security business application and infrastructure compliance reviews, risk analysis, forensics and generation of reports for internal and external audiences.

Skills, Knowledge & Expertise:

5+ years of relevant information security, compliance, and risk experience with a strong history of working with software engineering teams.
Must be experienced working in a Cloud native/SaaS product and technology company - previous hands-on engineering experience is advantageous.
Computer Science or similar degree or relevant experience/certification (CISSP, GSEC, AWS Security Specialist) with a strong technical architecture background.
Experience in leading and managing processes for organisational information security risk assessment and governance against standards like SOC2, ISO27001 or HIPAA.
Proven experience in problem solving and influencing business stakeholders in technology and security risk management.
Skilled in risk management, business risk analysis, and making complex business/risk trade-off recommendations and decisions.
Project and initiative Delivery – Proven experience influencing and driving Information Security improvements and strategy.

Job Benefits:

Flexibility: Enjoy working from our HQ Sydney office twice a week, collaborating with the teams for success, the rest of the working week is flexible either home or office
Culture-first: We’re big on collaboration and fostering an inclusive, fun, and dynamic work environment. Expect regular team events and celebrations.
Personal growth: Take your career to the next level with our professional development allowances and a strong focus on internal growth.
Equity: All employees share in our success with access to our share options scheme.
Inclusive leave policies: Generous paid parental leave and a day off for your birthday.

First Round Interview

Technical Interview

Hiring Manager Interview