GM, Information Security (CISO) Greater Melbourne, Australia Area

Melbourne, Victoria

Lead Latitude’s cybersecurity strategy, technical capability and resilience.

Latitude is seeking a GM of Information Security (CISO) to lead our information and cybersecurity function, combining executive leadership with deep technical judgement.

Reporting to the Chief Risk Officer, you’ll be accountable for Latitude’s cybersecurity strategy and overall security posture, providing evidence-based advice to the Executive Leadership Team and Board.

As Latitude invests in technology and evolves its consumer lending proposition, you’ll shape the security capabilities that protect our customers, people and services while enabling innovation. The role spans strategy, governance and assurance, security operations, identity management, asset management and recovery, with a clear expectation: demonstrate that security investment mitigates risk and strengthens resilience.

The opportunity

You’ll set a prioritised, multi-year cybersecurity roadmap aligned with business objectives, technology strategy and risk appetite. You’ll remain technically engaged in critical decisions, challenge assumptions and ensure confidence in our controls is supported by testing and operational evidence.

Your priorities will include:

Strategy and executive advice: establish clear security priorities and give executives and the Board a practical understanding of material exposures, investment choices and progress.

Technical security leadership: set architecture principles, engineering standards and control requirements across identity, cloud, applications, infrastructure and data, embedding security into technology change.

Cyber defence and incident leadership: lead detection, investigation and response capabilities, directing significant incidents through containment, remediation and recovery.

Exposure reduction: drive risk-based vulnerability remediation, stronger identity and privileged access controls, and measurable reductions in exploitable attack paths.

Resilience and recovery: work with business and technology leaders to test whether critical services can withstand disruption and recover securely under realistic attack scenarios.

Governance and emerging risk: maintain an effective Information Security Management System, strengthen third-party security and establish proportionate controls for AI and emerging technologies.

People and investment: develop a high-performing security function and manage budgets, partners and specialist providers against clear capability and risk-reduction outcomes.

You’ll set mandatory security requirements, require evidence of control effectiveness and direct remediation of material weaknesses. You’ll also challenge risk acceptance decisions and escalate exposures beyond agreed tolerances, working with technology and business leaders who retain accountability for their systems and operations.

The experience and judgement you’ll bring

We’re looking for a senior cybersecurity leader who can move confidently between Board discussions and complex technical decisions. You’ll bring credibility with technical teams, sound commercial judgement and calm, decisive leadership under pressure.

You’ll demonstrate:

Significant leadership experience with accountability for enterprise security capabilities in a complex technology environment.

Deep technical judgement across security architecture, engineering, operations, identity, cloud, application security, data protection and cyber resilience.

Experience directing material cyber incidents, including technical investigation, containment, recovery and executive communication.

A track record of delivering enterprise security improvements and validating control effectiveness through testing, threat-informed analysis and independent assurance.

The ability to explain technical risk and investment priorities clearly to executives and Boards.

Commercial discipline in investment prioritisation, business cases and management of vendors and managed services.

Experience operating in a regulated, highly controlled or critical-service environment.

Australian financial services experience would be highly regarded, alongside familiarity with relevant regulatory requirements and frameworks, including APRA CPS 234 and CPS 230, the Australian Privacy Act, ASD Essentials, ISO 27001 and NIST CSF. Relevant qualifications and professional credentials, or equivalent practical experience, are also valued.

You’ll use AI thoughtfully to improve analysis and team effectiveness, with appropriate security, privacy, governance and human oversight.

Leadership at Latitude

You’ll join a collaborative, accountable and technically curious team that values constructive challenge, evidence-based decisions and the willingness to address difficult risks directly.

Success will be measured through reduced material exposure, demonstrably effective controls, stronger detection and recovery capabilities, timely remediation of audit and regulatory findings, and clear returns from security investment.

Our values—Take Ownership, Pursue Excellence, Win Together and Create Tomorrow—guide how we lead, make decisions and work together.

More possibilities for you

We believe doing great work starts with feeling supported.

We make it possible…

To spend more time with your loved ones—with an extra week of paid leave each year through our Take 5 initiative.

To enjoy greater flexibility—with a hybrid working model that combines working from home with connection in the office.

To put your wellbeing first—with Sonder, a 24/7 support app for mental and physical wellbeing.

To access financial benefits—with discounts on Latitude products and services.

Lead what’s next

If you bring the technical depth, executive judgement and leadership to strengthen Latitude’s security and resilience, we’d welcome your application.

We make it possible—for our customers, our partners and our people.

Successful applicants will be required to complete background checks.