Head Of Information Security

Melbourne - on the lands of the Kulin nation

Nous Group is seeking an experienced and hands-on Head of Information Security to lead security strategy, security engineering and GRC (Governance, Risk and Compliance). This permanent, full-time position offers the flexibility of a hybrid working model, including time in our state-of-the-art office at Melbourne Quarter on Collins St – a space designed to inspire innovation and collaboration.

The purpose of this role is to manage and mature Nous' information security management programs to enhance security posture and meet required standards in accordance with regulations and legislation. The ideal candidate will come from a strong technical security background, with exceptional leaderships skills and a deep understanding of governance, risk and compliance, pertaining to cyber security.

Nous is a great place to work… Nous Group is an international management consultancy with over 750 people working across Australia and New Zealand, the UK, Ireland and Canada. We are a values-based organisation that is inspired and determined to improve people's lives in significant ways. Working in unique, cross-disciplinary teams we create innovative and enduring solutions that transform businesses, governments, and communities. We realise a bigger idea of success.

Nous Group is proud to be recognised as a Great Place to Work in the UK, Canada, and Australia, reflecting our expanding global influence and success. Nous consistently garners accolades as an exceptional workplace through various competitive reviews. We've been acknowledged as one of LinkedIn's Top Companies for career growth in Australia and have been awarded Best Management Consulting Firm by the Australian Financial Review on multiple occasions.

Key responsibilities : Lead, mentor, and support a high-performing information security team, ensuring team members maintain up-to-date skills and certifications aligned with evolving security needs.Oversee the ongoing development and implementation of an effective, practical Information Security Management System (ISMS) frameworkLead the preparation, review, and delivery of the security strategic plan, including preparing Board reportsCoordinate security assurance activities, such as penetration testing, and security audits (e.g. ISO 27001, Essential 8 and UK Cyber Essentials)Assess third party information security risks and perform security assessments on IT vendors and apps, including AI appsEnsure compliance with best practice standards, including ISO 27001, Essential 8, NIST CSF, the Australian Government Protective Security Policy Framework (PSPF) and the Defence Security Principles Framework (DSPF)Develop and maintain security and information management related policies and proceduresOversee the effective management and administration of Nous' information security tools and systems, including those related to endpoint protection, email-filtering / anti-phasing, antivirus, data loss prevention, SIEM etc.Lead the response to security breaches and data leaks, including investigation, containment, reporting, submissions to relevant authorities and stakeholders and post incident reviewsRespond to internal and external enquiries in relation to security managementOversee the administrative process for obtaining security clearances for Nous staffYou are : An exceptional communicator, both written and verballyPassionate about security and information managementImpeccable integrity and trustworthinessA person with strong interpersonal skills, and the ability to build relationships across the business and influenceA person with exceptional attention to detail and thorough in approachAble to understand the business problem / intent and think beyond the technicalSkills and experience : Strong technical experience in security, using a variety of tools (ideally CrowdStrike, Mimecast, Defender, Purview or others)Working knowledge of how to apply information security best practices (e.g. ISO 27001, NIST, Essential 8 etc) in a professional services environmentKnowledge of theoretical and practical security processes and conceptsPractical experience in security related strategic planning, audit and compliancePractical experience developing security policies, procedures and processesAwareness of the Australian Government Protective Security Policy Framework and / or the Defence Security Principles FrameworkExpertise assessing security controls across an organisation and translating findings into actionDemonstrated consultative approach with a clear ability to build strong relationships with business stakeholders at all levelsAbility to obtain an Australian Government security clearance (NV1 or higher)Knowledge of other security and risk control frameworks such SOC 2 reports and ISO 31000What makes Nous a Great Place to Work? Our aim is to deliver a flexible experience that delivers positive influence and growth for you, our colleagues, and our clients. Below are some of the ways employees at Nous are encouraged to enjoy that experience :

Giving all employees greater flexibility around public holidays. Understanding that people of different cultures, religions, and political beliefs may wish to choose to take alternate days of leave from scheduled holidaysHybrid working, with monthly remote working allowance, and once off payment to set up your work-from-home officeA collaborative bonus that reflects company performance, and is available to allCelebrating commitment to Nous by enabling access to long service leave after five years of employmentSupporting working parents by providing 18 weeks of paid primary carer parental leave and 10 weeks of paid secondary carer parental leave (access to parental leave is gender neutral).Finally, the important details… Nous is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We welcome applications from people of all backgrounds, including Aboriginal and Torres Strait Islander people. Nous is a flexible workplace that offers consulting opportunities on a full-time and part-time basis.To apply for a role at Nous in Australia you must have Australian Permanent Residency or right to work in Australia.Please note if you are successful in the recruitment process, you will be required to undertake background screening prior to your commencement at Nous.

Apply for this job

indicates a required field

First Name

Last Name

Email

Phone

Location (City)

Resume / CV

Enter manually

Accepted file types : pdf, doc, docx, txt, rtf

Enter manually

Accepted file types : pdf, doc, docx, txt, rtf

Education

School Select...

Degree Select...

Select...

Select...

Start date year

End date month Select...

End date year

Equity, diversity and inclusion is important to Nous. As part of our commitment to building a diverse workforce, we are measuring and evaluating our recruitment practices and outcomes. We invite you to complete the following questions to support our organisation's commitment to attracting a diverse talent pool. These questions are voluntary. If you do not wish to respond, you can select "prefer not to answer" in each of the questions. Select...

Information you provide will be held in confidence by Nous' recruitment team and may only be used on an aggregated or de-identified basis for the purposes of measuring and evaluating recruitment practices and outcomes. Hiring managers and individuals involved in hiring decisions will not have access to any information shared to these questions.

If you would like to share any of this information with hiring managers, or require accommodations as part of your application, please include the information below. If you have any questions, or require further information please contact

Preferred name

What is your preferred name? E.g. Ben instead of Benjamin etc.

Select...

Aboriginal and / or Torres Strait Islander

• Select...

Nous' commitment to reconciliation includes improving Aboriginal and Torres Strait Islander employment outcomes within our workplace and we believe this also benefits Nous by creating a more diverse workplace.

Aboriginal and Torres Strait Islander peoples are the First Australians and the traditional custodians of Australia. Aboriginal peoples comprise diverse Aboriginal nations, each with their own language and traditions and have connections to country across mainland Australia, Tasmania and many of Australia's offshore islands. Torres Strait Islander peoples have their own distinct identity, history and cultural traditions and come from the islands of the Torres Strait, between the tip of Cape York in Queensland and Papua New Guinea.

Aboriginal and Torres Strait Islander people :

are of Aboriginal and / or Torres Strait Islander descent, andidentify as an Aboriginal and / or Torres Strait Islander person, andare recognised as such by their communityHow would you describe your cultural background? (Please select up to two cultural backgrounds)

Which geographic location were you born in? (Please select one only) Select...

Apart from English, in which language(s) could you have a conversation about of the majority of everyday things? Select...

Do you have a disability?

Disability details : Accommodations

Do you require any accommodations to participate in the interview process, or to perform work related tasks associated with the position for which you've applied at Nous Group?

Nous is committed to diversity and inclusion and does not discriminate based on race, religion, sexual orientation, gender, disability, age or any other attribute. We ask this question to makesure we can provide you with a safe work environment.

How do you describe your gender?

Gender refers to current gender, which may be different to sex recorded at birth and may be different to what is indicated on legal documents.

How did you hear about Nous?

Nous Employee

If you heard about Nous through a Nous employee, include their name

Have you previously worked at a consultancy firm?

What are your salary expectations? (You can provide a range)

What is your notice period?

Select...

Do you have the right to work in Australia?

You must have Australian Permanent Residency or right to work in Australia. Unfortunately, if you do not have working rights your application will not be accepted.

Visa

Are you currently on a visa?

If you are on a visaspecify :

which visa

what working rights it allows you

remaining time on visa.

Otherwise insert 'N / A'.

Do you have a valid Australian Government Security Clearance (e.g. issued by AGSVA)?

Valid security clearance details

If you selected yes to a valid security clearance, please include details including level, expiry date and CSID.

Security clearance

You may be required to obtain a security clearance. Is there any reason you would not be eligible? E.g. not an Australian citizen.

Retention of application information

If I withdraw my application or am unsuccessful, I would like my information to be retained by Nous for consideration with future opportunities.

Recruitment Privacy Statement and Privacy Policy

I have read and understand the Recruitment Privacy Statement and the Nous Group Privacy Policy.

I confirm that all the information that I have provided as part of my application for employment with Nous Group is true, accurate and complete. I accept that any false, misleading, inaccurate or incomplete information that I provide may lead to my application for employment being rejected, or to an offer of employment being withdrawn or to my dismissal from employment with Nous Group.

J-18808-Ljbffr