Cyber Defense Manager

About the Company

Compare the Market Australia and iSelect are trusted brands that provide Australians with tools to compare and purchase personal finance and home products including insurance, energy, and loans. They collaborate to offer a seamless, customer-centric experience helping customers find products tailored to their needs.

Key Responsibilities

• Lead day-to-day cyber defense operations across both brands, focusing on business service protection, customer data, and personnel.
• Manage security monitoring, alert triage, investigation processes, and incident response continuously enhancing detection capabilities and operational procedures.
• Coordinate incident management including investigation, containment, recovery, communication, governance, and post-incident reviews involving internal teams and external experts.
• Drive vulnerability management and penetration test remediation by prioritizing risks, assigning responsibility, tracking progress in Azure DevOps, and validating closure through testing or evidence.
• Oversee endpoint, cloud, identity and access, email security, and data loss prevention controls, partnering with platform owners to advance compliance, coverage, and operational robustness.
• Deliver security roadmap projects by setting scope, dependencies, ownership, and success indicators ensuring operational support and measurable risk reduction.
• Generate insightful security reports covering detection effectiveness, incidents, vulnerabilities, exceptions, and control performance to aid risk and investment decisions.
• Cultivate strong collaboration across infrastructure, cloud, applications, service delivery, risk teams, manage security vendors, improve operational capabilities, and provide technical mentorship.

Qualifications and Skills

• Proven experience leading cyber defense operations and handling security incidents within complex environments making risk-informed decisions.
• Strong expertise in security monitoring, endpoint and cloud security, identity and access management, secure access, and data protection controls including interpreting test results and driving remediation.
• Capability to balance operational tasks, security projects, and stakeholder priorities effectively while managing vendors and technology partners.
• Excellent communication, stakeholder management, coaching skills, and disciplined approach to documentation, metrics, governance, and service delivery.
• Relevant qualifications or equivalent hands-on experience in cybersecurity, security operations, or cyber defense fields.
• Preferred experience in customer-facing digital or multi-brand environments with exposure to PCI DSS, security assurance, and risk reporting.
• Familiarity with AWS, Netskope, Cloudflare Zero Trust, cloud security posture management tools, work-tracking software, and security automation technologies is desirable.
• Exposure to detection engineering, threat hunting, or security operations automation is a plus.
• Industry certifications such as CISSP, GIAC GSOM, AWS Security Specialty, or related credentials in security, incident response, or cloud are advantageous.

Work Culture and Benefits

At Compare the Market and iSelect, ideas are welcomed, contributions valued, and growth is supported. The environment fosters collaboration and meaningful work recognition guided by shared values of Drive, Noble Intent, and All Together.

• Engage with a lively community featuring yearly celebrations, family events, and regular social activities.
• Benefit from flexible working arrangements with options such as one remote day weekly or a 9-day fortnight.
• Access additional leave options including ‘ME’ leave and volunteer days, plus the opportunity to buy extra annual leave.
• Receive a return-to-work bonus designed for returning parents.
• Participate in quarterly awards and recognition programs.

Additional Information

This position is open only to candidates with unrestricted Australian work rights; sponsorship is not available. The employer is committed to equal opportunity and diversity and upholds Australian privacy regulations, ensuring application confidentiality and secure handling of personal data exclusively for recruitment purposes without external sharing without consent.