Cybersecurity Lead - Work from home
At a glance
Senior Security Operations & Analysis role at Twoconnect. Remote, Philippines · full-time.
Pay not stated Security Operations & Analysis salary
remoteroles summary, based on the employer's posting.
What you'll do
- Set the security strategy, maturity plan and spending priorities around business needs and risk tolerance
- Own the risk register and control programme, track progress against maturity goals, and brief executives and the board
- Set security design rules for identity, endpoints, networks, cloud and connections to plant technology
- Lead major incident response, review what happened and direct follow-up improvements with IT and the managed security team
- Set provider security expectations, assess plant networks, oversee security tools and coach the IT Security Analyst
What you bring
- At least eight years in cybersecurity, including several years leading strategy or security work
- You have owned a security framework and maturity programme, with measurable results and executive or board reporting
- You can secure Microsoft enterprise environments and work with a managed security operations provider
- You have managed cyber risk across a complex organisation with multiple sites or countries
Who this fits
This senior strategic lead role suits someone who sets security direction and owns risk, while an analyst handles daily monitoring, investigation and remediation. It is remote from the Philippines, with a Monday-to-Friday schedule of 7:00 AM to 4:00 PM PHT, adjusted for daylight saving time. OT or industrial security experience is an advantage.
From the employer
We are seeking an experienced Cybersecurity Lead to oversee cybersecurity strategy, governance and risk for a global manufacturing and engineering organisation. This senior leadership role will drive security standards, manage the cyber risk framework, and guide security improvements across a complex, multi-country IT and operational technology environment. Working closely with executive stakeholders, regional IT providers and a managed security operations team, you will shape the organisation's security roadmap, strengthen resilience, and build a culture of security awareness.
- Define and own the group's cyber security strategy, maturity roadmap and investment priorities, aligned to the business and its risk appetite. Set the standards that IT, regional providers and MSPs must meet.
- Own the cyber risk register, the control framework and the Essential Eight maturity programme. Drive measurable improvement against an agreed target maturity, and report posture and risk clearly to executives and the board.
- Define security architecture principles and requirements across identity, endpoint, network, cloud, and the boundary between corporate IT and operational technology (OT) at manufacturing sites. Embed security into how the environment is designed and how change is governed.
- Own the incident response framework and lead major-incident response, coordinating the analyst, Arctic Wolf, IT teams and the business. Own post-incident review and the improvements that follow.
- Set and assure the security requirements for MSPs and regional providers, and lead the assessment and risk reduction of operational technology and plant networks, an area that spans IT and plant engineering.
- Own the relationship and roadmap for the security toolset (Microsoft Defender, Arctic Wolf and related), ensuring the investment delivers measurable risk reduction, and advise on security implications of major programmes including the D365 rollout.
- Lead and develop the IT Security Analyst, build security awareness across the business, and raise the organisation's overall security maturity and culture.
- Lead a two-person security function comprising this strategic lead role and an IT Security Analyst who handles hands-on monitoring, investigation and remediation, supported by Arctic Wolf as the managed SOC. Maintain a clear separation between setting and owning the security direction and executing it day to day. Set the standard and own the risk; the function below you delivers against it.
Requirements
- Significant experience in a senior cybersecurity role - security manager, lead, or equivalent - owning strategy, governance and risk, not solely operations. As a guide, 8+ years in cybersecurity with several years in a leadership or strategic capacity.
- Proven ownership of a security framework and maturity programme (Essential Eight, NIST, ISO 27001 or equivalent), with a track record of measurable improvement and executive or board reporting.
- Strong grounding in securing Microsoft enterprise environments (Defender, Entra ID, Microsoft 365) and in working with a managed SOC or MDR provider such as Arctic Wolf.
- Experience managing cyber risk across a complex, multi-site or multi-country organisation, and the judgment to prioritise risk against business reality.
- Genuine capability to face executives, auditors and the business, translating technical risk into decisions, and to hold a security standard against operational pressure.
- Experience of, or genuine appetite for, operational technology (OT) and industrial environment security is a strong advantage given our manufacturing footprint.
Desirable
- Manufacturing, industrial or critical-infrastructure security experience.
- Senior security certifications (CISSP, CISM, or equivalent).
- Experience leading security through a major transformation or ERP programme.
- Familiarity with ITSM-embedded security operations (Freshservice or similar).
Benefits
Why Join Twoconnect?
We offer more than just a job — we offer a supportive and rewarding career experience. Here’s what you can expect from this opportunity:
- Work from home
- Mon - Fri 7:00 AM – 4:00 PM PHT (adjustments will be made for daylight saving time)
- HMO with 2 free dependents and medical reimbursements
- Government-mandated benefits
- Opportunities to work with leading companies in Australia and beyond
- Training programmes for career development
- Engaging company outings, team activities and wellness sessions
- Supportive, inclusive culture
- Dedicated managers focused on your growth and success
Twoconnect connects highly skilled Filipino professionals with established companies in Australia, New Zealand, the United States, the United Kingdom and Europe, providing direct access to global careers and long-term opportunities.
We offer competitive pay and benefits, additional entitlements and structured career development programs that make employment both financially rewarding and professionally sustainable.
Our industry-leading retention rate demonstrates our commitment to a people-first culture that prioritizes stability, growth and genuine care for every employee.
Twoconnect is an equal opportunity employer. We value cultural diversity and foster an inclusive workplace where every employee is respected and supported as part of a growing global team.