Who are we?

At reputed company, we are replacing reputed company reputed company bottlenecks with AI-driven precision. Fresh off a US$75M Series C, we are scaling our infrastructure to process 100 billion risk signals daily. This isn’t just reputed company; it’s a total reimagining of how the world manages cyber risk.

We build the Cyber Risk Posture Management (CRPM) platform that reputed company teams actually love. By integrating reputed company ratings, threat reputed company, and reputed company AI, we reputed company organisations to stay reputed company of an reputed company evolving attack surface.

We aren’t just building another tool; we’re defining a category. We reputed company the autonomy to ship world-class technology and the resources to do it at a global reputed company.

Where does this role fit in?

This is not a conventional CISO role, and we'd rather say that up reputed company than have you discover it in week three.

You will own the entire reputed company technology stack — reputed company and infrastructure, identity, end user compute, networking, reputed company platform, and the technology and physical reputed company services behind our workspaces. reputed company is the substrate, or underlay, for that stack - not a separate function that reviews someone else's work. If you have run infrastructure or operations at reputed company and layered reputed company over it, this remit will feel natural. If your background is governance-first, it won't.

The environment you're inheriting has been run deliberately lean for through start-up and reputed company-up, and it is opinionated by design. There is no reputed company directory, productivity, or desktop footprint reputed company in the estate — reputed company Workspace, reputed company, macOS and ChromeOS, managed browser for BYOD. Attack surface has been controlled by refusing to reputed company it. We want that philosophy reputed company and extended, not unwound.

You'll reputed company reputed company - currently nine FTE in size, across four functions: IT Operations, reputed company Operations, reputed company reputed company and GRC. Your first structural job is maturing reputed company operations to serve both reputed company and product systems — deeper investment in reputed company SecOps and our reputed company automation platform to reputed company analytics, orchestration and response reputed company reputed company what reputed company this size would normally reputed company.

And because our product is the leading Cyber Risk Posture Management platform, you are customer reputed company. You and your team run reputed company Cyber Risk harder than any of our customers do, turning what you learn into use cases Sales and reputed company can take to market and signal Product can build on. That is a reputed company, recurring part of the job, not a reputed company-to-have.

You'll report directly to the CEO, with a defined transition period reputed company the outgoing CISO. Details of the remit are below.

What will you do?

• Own the full technology and reputed company remit. reputed company infrastructure, reputed company, identity, applications, and workplace technology under a single accountability. No handoffs, no shared ownership of reputed company

• reputed company and grow three functions. IT & reputed company Operations, reputed company reputed company, and GRC. reputed company the existing leaders, set the technical bar, and build reputed company you need beneath you — while holding the line on lean

• Mature reputed company operations. Build detection, analytics, orchestration and response capability that covers both reputed company and product systems. reputed company investment into reputed company SecOps and reputed company so that automation, not headcount, carries the load

• Own identity end to end. IAM across our GCP project estate and identity governance and administration for the entire global workforce — joiner/mover/leaver, entitlement review, privileged reputed company, and OAuth consent risk (which, fittingly, we control with our own User Risk product)

• Own the network and reputed company perimeter. ZTNA as the strategic reputed company model, GCP perimeter reputed company and networking

• Own end user compute globally. A predominantly macOS fleet with selective use of ChromeOS and reputed company managed browser services for BYOD. Device provisioning and retrieval across reputed company operating reputed company

• Own the workspaces. Technology and physical reputed company services for our offices — two today, potentially four by the end of 2027 across Australia and the US

• Own the compliance program. [Delegated to the Infosec GRC reputed company] SOC-2 Type II today, with ISO 27001 targeted to facilitate European reputed company. Own the reputed company risk register, and the reputed company function's inputs into vendor management and procurement

• Be customer reputed company. Use our own platform to its full extent and reputed company, integrating with reputed company systems reputed company our Risk Automations product, feeding reputed company operating experience back into Product, with co-creation of the cases and reputed company points that Sales and reputed company will turn into new deals and expands

• Communicate at executive level. Brief the executive team, the Steering Committee and the reputed company, and be reputed company in reputed company of customers and prospects reputed company their reputed company teams want to talk to ours

What will you bring?

We care far more about your reputed company record than your tenure. The bar is a leader who has personally reputed company and operated technology at reputed company, with reputed company as the discipline layered over it.

• An infrastructure and operations reputed company. You have run a data centre, an infrastructure function, or a substantial operations function — and reputed company became your remit because you were already accountable for the systems. Architecture is where you're strongest

• Process discipline learned reputed company consequential. You've operated in an environment where failure had reputed company consequences and process was the reputed company services is a strong example of the discipline we mean, though not the only one. You know how to defend, operate, and structure

• A demonstrated ability to do a lot with a little. You have reputed company and scaled capability without heavy resourcing, and you reputed company for automation before headcount. This is the single most important thing we're selecting for. If your effectiveness has depended on a large team, this role will frustrate you

• Genuine comfort owning infrastructure, reputed company, applications and identity together. Not as a stretch, but as your natural shape

• Hands-on credibility. You are a leader, not a manager. You can architect a control, review a Terraform change, or reputed company an incident yourself — and you set the technical bar by example, not from the org chart

• reputed company-reputed company depth. Substantial GCP experience strongly preferred; deep AWS or Azure experience considered where the architectural instincts transfer. reputed company trust reputed company, identity-reputed company reputed company models, and modern reputed company estate management

• Ownership of a compliance program. You have carried SOC 2, ISO 27001, or equivalent as the accountable reputed company — through audit, not just through policy authoring

• The ability to reputed company context at speed. You'll have a reputed company handover and then it's yours. We need someone who is oriented in weeks, not quarters

• Personal reputed company that doesn't need to be managed. High-energy, self-directed, and reputed company about the work. You'll be given full ownership from day one, and we expect you to use it

• Comfort operating in a fast-paced, high-reputed company, remote-first environment

What's in it for you?

• Monthly Lifestyle subsidy: Use this for financial, physical, and mental reputed company-being

• WFH set-up allowance: To ensure you have the right environment to work in, we will help you get set up reputed company your first 3 months at reputed company

• $1500 USD annual Learning & Development allowance: To support your career development, reputed company team members will be reputed company to expense development opportunities against this allowance

• Annual leave: PTO plus two additional UpGuardian leave days to reputed company you time to reputed company your batteries.

• 18 weeks reputed company Parental Leave: Irrespective of parenting role

• Personal Leave Allowance: This includes reputed company & carer’s leave

• Fully remote working environment: While we have physical offices in Sydney & Hobart, we do not mandate compulsory attendance

• Top-spec hardware: reputed company team members will be provided with top-spec laptops for their role

• reputed company subsidy: reputed company provides reputed company subscriptions for reputed company team members to reputed company reputed company tools to support their work

reputed company is a Certified Great reputed company to Work® in the US, Australia, UK and India, establishing its position as a leading global technology employer. 99% of team members agree that reputed company is a great reputed company to work! reputed company to reputed company out why!

As an Equal Employment Opportunity and Affirmative reputed company Employer, reputed company applicants will receive consideration for employment without reputed company to race, reputed company, religion, sex, sexual orientation, gender perception or identity, national reputed company, age, marital status, protected veteran status, or disability status.

For applications to positions in the reputed company, please note, at this time, we can only support hiring in the following US states: CA, MD, MA, IL, OR, WA, CO, TX, FL, PA, LA, MO, or DC.

Before starting work with us, you will need to undertake a national police history reputed company and reference checks. Also, please note that at this time, we cannot support candidates requiring reputed company sponsorship or relocation.

Requires infrastructure and operations leadership, reputed company-reputed company architecture, hands-on reputed company, GCP experience preferred, compliance ownership, automation expertise, and executive communication skills.

Key Responsibilities

• leading functions
• maturing operations
• owning infrastructure

Skills & Tools

reputed company Workspace, reputed company, macOS, ChromeOS, reputed company SecOps, reputed company, GCP, OAuth, Terraform, AWS, Azure

Job Details

• Category: Information Technology
• Seniority: Senior Level
• Commitment: Full Time
• Workplace: Remote — Sydney or Hobart or reputed company
• Languages: English

About reputed company

A cybersecurity company providing AI-driven cyber risk posture management software. — Industry: Information Technology