The Chief Information Security Officer (CISO) is responsible for developing and implementing an enterprise-wide information security strategy that protects systems, networks, and data from cyber threats. This leadership role ensures alignment between security initiatives and business objectives in a complex IT environment.
CISO job duties and responsibilities of the job
Key responsibilities of a CISO in the IT sector include:Leading the development and execution of the organisation’s cyber security strategyOverseeing the design and implementation of security architecture and policiesManaging risk assessments, threat modelling, and incident response planningEnsuring compliance with relevant security standards and regulatory requirementsCollaborating with IT, legal, and executive teams to align security with business goalsMonitoring emerging threats and adapting strategies accordinglyLeading the response to security incidents and breachesReporting on security posture and risk to senior leadership and the boardManaging vendor relationships and security auditsEmbedding security in digital transformation initiatives and cloud migrationDeveloping a security awareness culture and employee training programsOverseeing data protection practices in line with the Privacy Act and OAIC guidelinesGovernance around identity and access management (IAM)
Typical CISO job qualifications and requirements
Extensive experience in information security leadership is essential, typically supported by a bachelor’s or master’s degree in cyber security, information technology, or a related field, with certifications such as CISSP, CISM, or CISA highly regarded.Key skills and attributes for success in this role include:Proven experience in senior security roles, including leadership of security teamsExpert knowledge of Australian regulatory frameworks, particularly APRA CPS 234, CPS 231, Privacy Act 1988 and OAIC guidelines, and ASIC’s cyber resilience expectationsDeep understanding of security frameworks (e.g., NIST, ISO 27001) and risk managementStrong understanding of data residency, cross-border data transfer risks, and local compliance obligationsExperience managing third-party and vendor risk in regulated Australian environmentsExcellent communication and stakeholder engagement skillsStrategic mindset with the ability to balance risk and business priorities
The candidate has little or no prior experience in the position and is still developing relevant skills.
50th Percentile
269483
The candidate has an average level of experience and has most of the necessary skills.
75th Percentile
307038
The candidate has above-average experience, has most or all the necessary skills and may have specialised qualifications.
Salary range based on three percentiles
The starting salaries represent gross yearly salaries. They do not include bonuses, benefits or superannuation.
Access thousands of skilled contract and permanent candidates at every level from support roles to C-suite, and pinpoint the talent you need using our industry-leading matching technology.Find your next hire
