At Country Road Group, our Group Functions sit at the heart of our business, driving the success of our portfolio of distinctive brands and enabling them to do what they do best. Working across the business, you will play a vital role in shaping how we operate, grow, and innovate, bringing our strategy to life.

As the Cyber Security Manager, you will lead the cyber operational and engineering capability that protects Country Road Group’s systems and data. Reporting directly to the Head of IT: Enabling Platforms & Operations, you will lead our Cyber Security Analyst and Engineer, oversee security monitoring and incident response, and own the architecture and engineering roadmap for our core security controls and platforms.

This is a hands-on, solutions-focused cyber leadership role. We are looking for someone with a strong technical foundation in cyber security who has built their career through security operations, engineering or architecture and is now ready to combine that technical expertise with people leadership, vendor management and broader business influence. You will be comfortable getting into the technical detail, taking ownership of security challenges and working within a complex and fast-paced environment to turn cyber risks into practical solutions.

How You Will Contribute

• Lead, mentor and develop our cyber security team, overseeing the triage, investigation and response to security incidents and alerts
• Own the architecture and engineering roadmap for core security platforms, including MDR, XDR, SIEM, vulnerability management, email security and cloud security
• Develop and continuously improve incident response plans and playbooks, taking the lead during significant security incidents
• Drive improvements to detection and response capability in partnership with our outsourced MDR provider
• Design and implement scalable security controls and reference architectures across CRG’s evolving technology environment
• Take ownership of security vulnerabilities and technical risks, working with technology teams to develop and implement practical solutions
• Manage key security vendors and technology partners across performance, SLA’s, licensing, costs and ongoing service delivery
• Conduct IT security risk assessments and translate technical findings into clear, actionable recommendations for senior business leaders
• Partner with technology teams and senior stakeholders on security architecture, engineering decisions, technical trade-offs and cyber risk
• Partner with Risk & Governance teams on requirements such as PCI-DSS, ensuring compliance requirements translate into effective technical controls
• Maintain current knowledge of the cyber threat landscape and emerging technologies, continuously identifying opportunities to strengthen CRG’s security posture.

Capabilities We Value

• 5+ years’ experience in Cyber Security, with a strong technical background across security operations, engineering and/or architecture
• Demonstrated career experience working hands-on with cyber security technology, with subsequent progression into a lead, manager or senior technical role
• Strong knowledge of security architecture and engineering across areas such as network security, cloud security, endpoint/EDR and identity and access management
• Experience designing, implementing or maturing security tooling and controls such as MDR, XDR, SIEM and vulnerability management
• Strong incident response capability, including investigating security events, developing response playbooks and leading the resolution of significant incidents
• A solutions-focused mindset with the ability to move beyond identifying risk to designing and implementing practical solutions
• Demonstrated ability to lead, mentor and develop technical cyber security professionals
• Strong vendor management capability, including experience managing technology partners, service performance, SLA’s, licensing and commercial considerations
• Ability to translate complex technical risks into clear, business-relevant recommendations and influence senior stakeholders
• Working knowledge of frameworks such as ISO/IEC 27001/2, NIST, CIS and MITRE ATT&CK, with relevant cyber security or cloud certifications highly regarded
• Tertiary qualifications in Cyber Security, Computer Science, Information Technology, Engineering or a related discipline
• Retail experience and exposure to PCI-DSS would be advantageous, however we welcome experienced cyber security professionals from other complex technology environments.

What We Offer

• Bi-annual product allowance, access to sample sales and 40% discount for you and your immediate family across all CRG brands
• Flex your leave your way, including birthday leave, volunteer leave, personal leave and more
• Access to health and wellbeing support, including Health Insurance, 24/7 EAP counselling, discounted gym memberships and financial advice services
• 18 weeks paid parental leave program for eligible employees with return-to-work clothing allowance
• Internal career opportunities across our brands
• Annual learning calendar to support your ongoing development
• Support impactful community and charity partnerships across our brands, including OCRF, Our Watch, First Nations Reconciliation, Movember, Red Cross and Landcare.

Who We Are

Country Road Group is a design-led portfolio of premium fashion brands, comprising five iconic labels: Country Road, Mimco, Trenery, Witchery and Politix. Each brand has its own story, and together they hold a market-leading position in the mid to upper tier of Australia's specialty fashion segment with a focus on delivering our ambition to build a portfolio of distinctive brands that drive sustainable growth. Country Road Group is part of Woolworths Holdings Limited (South Africa), a leading Southern Hemisphere retail group.

We encourage you to explore our Current Opportunities and we look forward to connecting with you!

Country Road Group acknowledges the Traditional Owners of Country throughout Australia and recognises their continuing connection to lands, waters and communities. We pay our respects to Aboriginal and Torres Strait Islander cultures and to Elders past and present.

We’re committed to inclusion and accessibility. If we can support you with any adjustments at any stage, please let us know.