General Manager Cyber & Information Security

We're reimagining the way Australians live, work, and play. We own and manage some of the most recognisable and loved retail destinations across Australia.

 
We’re evolving our portfolio into destinations that offer a broad selection of retail, residential, and office spaces. Through our diverse portfolio, data-led decision-making, and nationwide development pipeline, we do things differently.

We are Vicinity.

Role purpose

Establish and maintain the enterprise vision, strategy, and program to ensure data, in any format, and privacy are adequately protected.

Key Accountabilities

People Leadership (PL roles only)

• All elements of the annual performance cycle are completed by the due date (including goal setting, mid-year reviews, EOY conversations)

• Regular 1:1’s, team meetings and development conversations conducted - minimum monthly cadence

• Performance issues are managed in an effective and timely manner

• Quarterly development conversations conducted with all team members

• 100% of compliance training is completed on time for team

• All health and safety, risk and compliance requirements are delivered across the team

• Effective management of budgets as per forecast with demonstrated focus on managing cost

• Demonstrated commitment to building own capability as a people leader

Cyber Security

• Develop and implement a comprehensive cyber security strategy aligned with business objectives covering the Vicinity corporate information (OT) assets and shopping centre operational technology (OT) assets. This includes information security risk management, cyber incident response, and the implementation and management of IT security technologies to protect Vicinity against threats that may compromise the confidentiality, integrity or availability of data and critical systems.

Data Governance

• Establish and enforce data governance framework, policies and procedures to ensure data integrity, availability, and confidentiality.

Privacy

• Acting as the Privacy Officer for the company, oversee the development and implementation of privacy policies and day to day privacy related matters e.g. handing privacy complaints or inquiries, to ensure compliance with privacy laws and regulations, protect personal data, and maintain the trust of customers and stakeholders.

Operations & Strategic Delivery

• Establishing and implementing a strategic, comprehensive enterprise cyber security and data governance framework and programs related to information security, IT risk management and data management lifecycles.

• Providing regular reporting on data governance and cyber security programs to Executive Leadership Team, Risk, Compliance and ESG Committee (RCEC) and the board of directors.

• Developing and managing the Cyber and Information Security team to implement the cyber security and data governance strategy.

• Overseeing incident management and response planning of security breaches, and assist with investigation, disciplinary and legal matters associated with such breaches

• Working directly with the business units to facilitate risk assessment and risk management processes.

• Identifying, developing and implementing information security policies, standards, procedures and guidelines.

• Leading cyber and data security culture change and overseeing the development and implementation of security awareness training programs.

• Coordinating with technology functions and business stakeholders to assess, implement, and monitor IT-related security risks/hazards.

• Identifying potential threats and vulnerabilities to the organisation’s information systems through ongoing monitoring and assessment

Key Role Relationships

• ELT, BLT, Board members, Legal Counsel, Risk & Compliance team, functional managers across divisions.

• Managed service providers, vendors, consultants.

• Australian Cyber Security Centre (ACSC)

Experience & Capabilities

ESSENTIAL EXPERIENCE (what you have done)

• Bachelor’s degree in computer science or business information management

• Over 10 years of experience in managing a cyber security or other related technology function

• Extensive experience in managing vendor relationships and negotiating contract terms and pricing for technology products and services<