• Melbourne or Sydney, Permanent, strong brand and team
• Lead incident response and oversee DLP activities
• Hybrid working, supportive culture, good package and bonus

A major critical infrastructure business is seeking an Incident Response & DLP Manager to lead a team of 3 in a high-pressure, highly visible environment.

This is a permanent hire for a leadership role sitting close to the Head of Cyber Defense. The position will suit either an established people leader or a strong senior incident response professional ready to step into management, provided they can demonstrate maturity, calm decision-making and strong technical credibility during live incidents. The core focus remains leading major cyber incidents and uplifting incident response capability, with additional oversight of Data Loss Prevention across cloud environments.

About the role

• Lead, coach and develop a team of 3 cyber security professionals in a fast-paced cyber operations environment
• Take ownership of major cyber security incidents across assessment, containment, eradication, recovery and post-incident review
• Provide calm, decisive leadership during live incidents and maintain clear direction when pressure is high
• Improve incident response runbooks, playbooks, reporting, tabletop exercises and operational processes to strengthen team capability and preparedness
• Oversee Data Loss Prevention capability across M365 and cloud environments, including policy tuning, monitoring data movement and investigating potential data leakage events
• Produce incident reports, root cause analysis, DLP insights and executive-ready updates for technical and business stakeholders

About you

• Proven experience leading or managing significant cyber security incidents in complex enterprise environments, with strong Incident Response Management capability
• Previous people leadership experience preferred, or clear readiness to step into a first management role
• Calm, level-headed and composed under pressure, with sound judgement during high-severity incidents
• Strong background in cyber security operations, incident response or security engineering, with exposure to DLP or broader information protection capabilities
• Excellent stakeholder communication skills, with the ability to engage technical teams and senior leaders and produce high-quality reporting
• Critical infrastructure or OT experience highly regarded, alongside a genuine ability to lead from the front and uplift operational capability

This is an excellent opportunity to join a highly recognised critical infrastructure business in a role with real visibility, genuine responsibility and the chance to shape incident response capability while also overseeing an important and growing DLP function.

Apply now for a confidential discussion.