Information Security Engineering Lead

Bring your authentic and passionate self to this exceptional role #careerswithimpact  

Are you an experienced Information Security Engineering Lead ready to make an incredible impact? Join HESTA’s Information Security team in this pivotal role, reporting to the Information Security Architecture Strategy and Engineering Manager and collaborating with teams across our businesses.

Information Security at HESTA is more than a technical challenge—it’s a commitment to trust, integrity, and member protection. You’ll be joining a collaborative team of engineers, analysts and administrators, all working together to deliver real-world impact through secure-by-design solutions.

As our new Engineering Lead, you’ll be managing and maintaining key elements of HESTA’s Information Security Engineering and Platform Engineering capability, as well as advising on the mitigation of critical vulnerabilities, ensuring that security risks are being managed and security compliance obligations are met.

What You’ll Do:

You’ll be responsible for strengthening our security engineering capability by:

• Leading the delivery and execution of our Information Security Strategy—focusing on security engineering uplift and process improvements.
• Collaborating across technical and business teams to build actionable remediation plans and deliver impactful risk mitigation.
• Mentoring and developing a team of Information Security Engineers—championing a culture of excellence and continuous learning.
• Innovate boldly—researching and testing new tools, techniques, and approaches to proactively uncover and manage vulnerabilities.
• Modernise controls through automation and intelligent technology solutions that boost efficiency and resilience.
• Contribute to strategic initiatives including the development and execution of vulnerability management and penetration testing activities.
• Contribute to the Information Security standards and compliance with evolving industry standards.

What You’ll Bring:

You’re a driven and pragmatic engineering lead who thrives on solving complex problems and making systems safer at scale. You’ll bring:

• Proven experience in a similar lead role in security engineering—ideally within financial services or superannuation.
• Expertise in security assurance activities such as audits, assessments, and reviews.
• Hands-on experience managing operating systems or security platforms in production environments.
• Understanding of cloud environment and security principles (IaaS, PaaS and SaaS)
• Knowledge of application security, development and security technologies such as identity and access management, data loss prevention, encryption, key management etc.
• Familiarity with APRA regulatory expectations and industry frameworks (e.g. NIST Cybersecurity Framework, CIS Benchmarks).
• Tertiary qualifications in technology, cybersecurity or related discipline.
• Certifications in AWS or Azure Security Engineer, Solutions Architect, SANS GIAC are highly desirable.
  
  

Benefits that matter and make a difference for our employees  

• Leave for those moments that matter, an additional 6 days of leave at the end of year, up to 6 days paid volunteer leave, gender neutral paid parental leave of 20 weeks, Gender Affirmation leave, reproductive health and wellbeing leave, Cultural and Ceremonial leave. Access your LSL after 3 years, take AL at half pay, and purchase up to 2 weeks additional leave (just to name a few!).  
• Your professional development matters, up to $5k per year professional development and up to 8 days professional development leave, HESTA scholarships and free access to a range of premium learning tools.  
• Your health and wellbeing matters, free annual flu shots and skin checks, incredible social events throughout the year and a comprehensive employee assistance program available 24/7.  
• Your financial wellbeing matters, up to 15% super, financial planning support, end of year payment for all Enterprise Agreement-covered employees, incentivised Employee Referral Program and novated lease options.  

We celebrate, value and include people of all backgrounds, genders, identities, cultures and abilities. We welcome and support applications from First Nations people, physically, neuro or culturally diverse, LGBTQI+, and people of any age. We are proud to be WGEA accredited as an Employer of Choice for Gender Equity.   
 

We want all candidates to feel safe, included and provided with the best opportunity to thrive, if you require reasonable adjustments during your application or throughout the recruitment process, please reach out to a member of the Talent team careers@hesta.com.au and we’ll call you to discuss.   

Ready to lead information security engineering with purpose?

Apply now to be part of a team that’s making a genuine difference in the lives of Australians—today and for the future.

Please note: Applications via recruitment agencies will not be accepted for this position.