Chief Information Security Officer in Sydney

At UpGuard, we are replacing manual security bottlenecks with AI-driven precision. Fresh off a US$75M Series C, we are scaling our infrastructure to process 100 billion risk signals daily. This isn’t just growth; it’s a total reimagining of how the world manages cyber risk.

We build the Cyber Risk Posture Management (CRPM) platform that security teams actually love. By integrating security ratings, threat intel, and agentic AI, we empower organisations to stay ahead of an ever-evolving attack surface.

This is not a conventional CISO role. You will own the entire enterprise technology stack — security and infrastructure, identity, end user compute, networking, cloud platform, and the technology and physical security services behind our workspaces. Security is the substrate for that stack - not a separate function that reviews someone else's work.

You will lead a team - currently nine FTE in size, across four functions: IT Operations, Security Operations, Cloud Platform Engineering and GRC. Your first structural job is maturing security operations to serve both enterprise and product systems.

What Will You Do?

• Own the full technology and security remit. Enterprise infrastructure, security, identity, applications, and workplace technology under a single accountability.
• Lead and grow three functions. IT & Security Operations, Cloud Platform Engineering, and GRC.
• Mature security operations. Build detection, analytics, orchestration and response capability that covers both enterprise and product systems.
• Own identity end to end. IAM across our GCP project estate and identity governance and administration for the entire global workforce.
• Own the network and cloud perimeter. ZTNA as the strategic access model, GCP perimeter security and networking.
• Own end user compute globally. A predominantly macOS fleet with selective use of ChromeOS and enterprise managed browser services for BYOD.
• Own the workspaces. Technology and physical security services for our offices.
• Own the compliance program. SOC-2 Type II today, with ISO 27001 targeted to facilitate European growth.
• Be customer zero. Use our own platform to its full extent and beyond.
• Communicate at executive level. Brief the executive team, the Steering Committee and the Board.

What Will You Bring?

• An infrastructure and operations foundation.
• Process discipline learned somewhere consequential.
• A demonstrated ability to do a lot with a little.
• Genuine comfort owning infrastructure, security, applications and identity together.
• Hands-on credibility.
• Cloud-native depth. Substantial GCP experience strongly preferred.
• Ownership of a compliance program.
• The ability to absorb context at speed.
• Personal drive that doesn't need to be managed.
• Comfort operating in a fast-paced, high-growth, remote-first environment.

What's In It For You?

• Monthly Lifestyle subsidy.
• WFH set-up allowance.
• $1500 USD annual Learning & Development allowance.
• Annual leave: PTO plus two additional UpGuardian leave days.
• 18 weeks paid Parental Leave.
• Personal Leave Allowance.
• Fully remote working environment.
• Top-spec hardware.
• Generative AI subsidy.

UpGuard is a Certified Great Place to Work in the US, Australia, UK and India, establishing its position as a leading global technology employer.