Information Security Officer

We’re looking for an experienced Information Security Officer to join our APAC Cyber Security team. In this role, you’ll work closely with our Head of Cyber Security – APAC, the broader Cyber team, Digital, and regional business units to ensure APM’s security risks are governed, managed, and continually improved. This role can be based anywhere in Australia.

If you’re someone who enjoys building strong stakeholder relationships, driving security uplift, improving governance processes, and shaping security culture across a diverse and growing organisation, this role offers both challenge and impact.

What you’ll be doing;

• Manage and maintain regional cyber security policies and standards.
• Conduct risk assessments and maintain risk register activities.
• Coordinate treatment plans, exception management, and third‑party risk reviews.
• Monitor adherence to legal, regulatory, and IT security requirements.
• Contribute to audits and certification processes.
• Enhance automation and continuous monitoring of security controls.
• Support uplift of security testing capabilities across the region.
• Coordinate training, communications, and maintain intranet content.
• Identify opportunities to enhance systems, processes, and efficiencies.

What you’ll bring

• 5+ years in an information security role or similar environment.
• Strong domain knowledge across cyber security principles, risk, and governance.
• Experience with frameworks such as ISO 27001, Australian Government ISM, and the Essential 8.
• Understanding of relevant Australian and global privacy legislation (e.g. Privacy Act, GDPR).
• Recognised certifications such as CISA, CISM, CISSP, SABSA or similar.
• Excellent communication, stakeholder engagement, negotiation, and influencing skills.
• Strong risk management capability and a productive, outcome‑driven work ethic.
• Cloud security experience is highly desirable.

Why APM?

At APM, you’ll join a purpose‑led organisation committed to enabling better lives. You’ll work with supportive leaders, collaborate across regions, and will contribute to meaningful change in how we manage and approach cyber security.

If you’re ready to make your mark in a dynamic, high‑impact role — we’d love to hear from you. Contact Shane at Shane.Bhan@apm.net for a confidential conversation today.