Infrastructure & Cyber Security Manager

Introduction

Rationale

Key Responsibility Areas

• Design, own, and maintain the organisation's multi-year infrastructure roadmap, with a strong focus on hybrid cloud architecture and positioning SPCE for future growth and scalability.
• Lead the planning, deployment, and maintenance of all network and server infrastructure (on-premises and cloud).
• Oversee performance, capacity, and availability of core systems and services.
• Ensure all systems are documented, monitored, and maintained to high standards.
• Oversee the creation, deployment, and maintenance of Standard Operating Environments (SOE) for Windows and Apple devices, including patch management and compliance with security standards (e.g., JAMF Pro, Intune).
• Own the governance, security, and lifecycle management of network-connected AV, collaboration, and communications platforms.
• Manage and optimise cloud infrastructure (M365, Azure, SaaS), ensuring robust security measures and alignment with NIST and SMB1001.
• Ensure all infrastructure and security practices comply with relevant legislation, standards (including NIST and SMB1001), and school policies.
• Develop, implement, and maintain the organisation's cyber security strategy and policies, aligned with the NIST Cybersecurity Framework and the SMB1001.
• Own and continuously improve the cyber security posture, including risk management, incident response, and compliance.
• Conduct regular security audits, vulnerability assessments, and awareness training.
• Promote a cyber-aware culture across the organization.

Additional Responsibilities

• Collaborate closely with the organisation's outsourced SIEM partner to manage the solution, ensuring log sources are correctly configured, tickets are triaged and managed by the internal team, and monthly SIEM reporting is delivered.
• Develop and present governance reports and dashboards for the Director of Technology, providing visibility into infrastructure health, security posture, compliance status, and progress against the roadmap.
• Develop, maintain, and regularly test disaster recovery and business continuity plans for all critical systems.
• Ensure systems and networks are resilient and backups are verified and tested on a regular basis.
• Develop and conduct cyber security table top exercises and simulated disasters for ICT and leadership teams.
• Manage, mentor, and develop the network engineering team (2 direct reports).
• Set clear objectives, provide regular feedback, and foster a culture of excellence and collaboration.
• Oversee team workload, professional development, and succession planning.
• Ensure high-quality end user support is delivered by the team, including device deployment, troubleshooting, and user training.
• Ensure timely and effective communication with stakeholders via service/helpdesk systems.
• Lead the research, review, and selection of new technologies, tools, and platforms to support the infrastructure roadmap, ensuring alignment with strategic objectives and security frameworks (NIST, SMB1001).
• Manage the end-to-end quote and proposal process for infrastructure and security solutions, preparing clear recommendations and business cases for presentation to the Director of Technology.

Governance and Compliance

• Oversee vendor relationships, including contract negotiation, performance management, and ongoing evaluation to ensure value, compliance, and strategic fit.
• Identify and implement service improvements, automation, and emerging technologies (e.g., AI, cloud security, IoT).
• Collaborate with other ICT and school teams to ensure alignment with organisational goals.
• Support the organisation's approach to privacy, data protection, and information security, including compliance with the Privacy Act 1988, the Australian Privacy Principles, and relevant Australian privacy laws.
• Maintain and support privacy and data breach response processes, including assessment, escalation, containment, investigation, record keeping, and notification where required under the Notifiable Data Breaches scheme.
• Implement supplier governance practices, including supplier vetting, due diligence, approved supplier lists, contract requirements, and ongoing review of supplier privacy, security, and operational risks.
• Lead the development and delivery of ICT training packages related to infrastructure and cyber security for ICT staff.
• Oversee and champion the cyber security awareness training for all staff.

Qualifications and Experience

• Bachelor's degree in Information Technology, Computer Science, Cyber Security, or related field.
• Minimum 5 years' experience in network/server administration and cyber security.
• Demonstrated experience with cloud infrastructure (M365, Azure), firewalls, endpoint security, and incident response.
• Strong knowledge and practical experience with the NIST Cybersecurity Framework and the SMB1001 mitigation strategies.
• Experience with SOE management, patching, and device fleet administration.

Desirable

• Proven experience managing technical teams.
• Industry certifications (e.g., CISSP, CISM, CCNP, Microsoft, Azure, Palo Alto, CrowdStrike, JAMF, Intune, Aruba, or similar).
• Experience in education or not-for-profit sector.
• Experience with automation, AI, or emerging security technologies.

Personal Christian Life

Interpersonal Skills

Conditions of Employment