Information Security & Risk Manager

Help protect the technology behind Diraq's quantum computers.
Diraq is building the world's first scalable quantum computers using silicon quantum dot technology. We are looking for an Information Security & Risk Manager to protect the technology, research, source code and controlled information behind that work.
You will define how security is built into the way we design systems, build software, protect research environments, manage access and work with partners across Australia and the United States.
You will own Diraq's Information Security Management System, establish security standards and governance frameworks, and work closely with Engineering, IT & Security, Legal, Export Controls and operational leaders to build the security foundations Diraq needs as it scales. You will bring strong experience in information security, security governance, technology risk or assurance. You will be comfortable working with technical teams and translating risk into practical security requirements that can be implemented in real environments. Ideally you have come up through a hands-on IT or security function, running systems, infrastructure or security tooling yourself, so you know what it takes to implement the requirements you set.

• Experience with security frameworks such as ISO 27001, NIST or equivalent.
• Sound judgement about where to hold the line on security and where to be flexible.
• Practical, hands-on experience in an IT or security operations function, such as administering systems, networks, cloud platforms, identity or security tooling.
• Experience influencing technical and business stakeholders without relying on direct authority.
• Understanding of secure development, identity governance, least-privilege and third-party security risk.
• Experience with security assurance, control testing, business continuity or incident management governance.
• An interest in protecting critical technology, research environments, source code and sensitive technical information.
• High integrity, discretion and comfort working in environments involving sensitive information.

Experience in deep tech, defence, aerospace, semiconductor, quantum, government, R&D or other highly technical environments would be highly regarded. Familiarity with export-controlled technology environments, partner assurance or hybrid environments spanning cloud, SaaS, on-premises infrastructure and physical laboratory sites would also be valuable.
Relevant certifications such as CISM, CISSP, CRISC, ISO 27001 Lead Implementer or ISO 27001 Lead Auditor are beneficial, but practical judgement and the ability to build usable security governance in a scaling environment are more important than certifications alone.

• Own and mature Diraq's Information Security Management System.
• Define information security policies, standards and control requirements.
• Embed security-by-design principles into engineering and technology practices.
• Develop least-privilege and access governance frameworks.
• Assess information security risks across systems, suppliers, partners and strategic initiatives.
• Own the security assurance program, including control testing, self-assessments and audit readiness.
• Establish incident management, business continuity and resilience governance, and run tabletop and continuity exercises.
• Conduct vendor, supplier, collaborator and partner security assessments.
• Work alongside the Global Export Controls Manager to ensure information security controls support controlled technology protection.
• Build security governance processes that scale with Diraq and support future assurance requirements.
• Run practical security awareness training for research, engineering and corporate teams.

Diraq already has security and compliance programs in place, this role is about maturing them as the company grows from research and development through commercialisation, protecting technology that is still being invented.
You will shape security governance, influence engineering and technology practices, and work alongside the physicists and engineers building Diraq's quantum computers.

• We have a paid volunteer day so you can give back to a cause you care about.
• The role is eligible for our employee equity scheme
• Hybrid work environment
• Unique chance to be directly involved in the next big technological advancement