Cyber Security Lead

Nine is Australia’s largest locally owned media company – the home of Australia’s most trusted and loved brands spanning News, Sport, Lifestyle, and Entertainment. We pride ourselves on creating the best content, accessed by consumers when and how they want – across Publishing, Broadcasting and Digital.

Nine’s assets include the 9Network, major mastheads such as The Sydney Morning Herald, The Age and The Australian Financial Review, radio stations 2GB, 3AW, 4BC and 6PR, digital properties such as nine.com.au, 9Now, 9Honey, Pedestrian.TV, Drive, subscription video platform Stan and a majority investment in Domain Group.

Our Purpose: We shape culture by sparking conversations, challenging perspectives, and entertaining our communities.

We bring people together by celebrating the big occasions and connecting the everyday moments. Australia belongs here. We bring our purpose to life via three shared values: We walk the talk, turn over every stone and keep it human.

Job Description

The Cyber Security team provides governance, audit, control, and operational Cyber Security capabilities to support business and operational objectives of Nine group. Minimising friction and managing appropriate risk are key tenets of the team. The Security team works closely with the Security Cloud Practice, Product Engineering, Network and Infrastructure and Services teams to collaboratively manage cyber controls.

The Cybersecurity Education and Change Lead plays a critical role in ensuring Nine’s cybersecurity posture is robust by leading the development and implementation of comprehensive training programs and facilitating a culture of security awareness and compliance. This role combines expertise in cybersecurity with effective change management strategies to enhance Nine's ability to protect sensitive information and mitigate cyber threats.

Key accountabilities of this role is to:

• Develop and maintain Cyber Security training curriculum that aligns with best practices, regulatory requirements and Nine’s business needs
• Create training materials, including e-learning modules, manuals, and workshops to educate employees on cybersecurity concepts, policies and procedures
• Collaborate with subject matter experts to ensure training content remains current and relevant
• Plan and conduct cybersecurity training sessions, workshops, and awareness programs for employees at various levels
• Manage red and purple team penetration test exercises and supplier management
• Utilise a variety of training methods, such as in-person sessions, webinars, and online courses, to engage and educate employees
• Evaluate the effectiveness of training programs through assessments, feedback, and performance metrics
• Develop and implement a cybersecurity change management strategy to promote a culture of security awareness and compliance.
• Work closely with key stakeholders to identify and address barriers to cybersecurity adoption and adherence to policies

Qualifications

• Bachelor's degree in cybersecurity, information technology, or a related field.
• Advanced degree or relevant certifications (e.g., CISSP, CISM, CompTIA Security+) is a plus.
• Proven experience in cybersecurity training, change management, or a related role.
• Strong understanding of cybersecurity principles, practices, and industry standards.
• Excellent communication and presentation skills with the ability to engage and educate diverse audiences and senior stakeholders.
• Ability to work collaboratively with cross-functional teams and adapt to a rapidly changing cybersecurity landscape.
• Analytical mindset with the ability to assess training effectiveness and make data-driven improvements
• Identity management skills (OKTA)
• Data leakage prevention (Netskope)
• Vulnerability management (Nucleus, Nessus, Rumble/Runzero/Snyk, Sysdig)

Additional Information

Our Commitment to Diversity and Inclusion:

At Nine, we are committed to fostering a workforce that embraces all aspects of diversity and inclusion and where practices are equitable to ensure our people experience a sense of belonging. From day one, you'll be encouraged to bring your whole self to work and will be supported to perform at your best. Should you require any adjustments to the recruitment process in order to equitably participate, we encourage you to advise us at the time of application.

We encourage applications from Aboriginal and Torres Strait Islander people, people with disabilities, and of all ages, nationalities, backgrounds and cultures.

Disclaimer: Nine does not accept unsolicited agency resumes. Nine is not responsible for any fees related to unsolicited resumes.