Security Operations Orchestration Manager

Corrs Chambers Westgarth is seeking an experienced Information Security Operations Orchestration Manager to play a key role in leading and evolving the firm’s security operations capability.

Based in Melbourne, this role sits within Information Services and supports the Head of Security & Risk in overseeing the day-to-day security operations across the firm. It is a highly visible role for someone who can bring together people, platforms, automation, external providers and AI-enabled capability to deliver a modern, intelligence-led security operations function.

This is an opportunity to take ownership of a broad and business-critical portfolio, spanning incident response, security monitoring, vulnerability lifecycle management, ISO/IEC 27001 assurance, vendor performance, commercial input and continuous improvement.

In this role, you will:

• Lead the daily rhythm of security operations, including monitoring, investigations, vulnerability management and incident response. 
• Own the end-to-end security operations lifecycle, from detection and investigation through to response, recovery and continuous improvement. 
• Orchestrate security analysts, automation platforms, AI-enabled tools and external providers into one cohesive operating model.
• Prioritise security activity based on business risk, impact and materiality, not just alert volume. 
• Design and maintain playbooks, workflows and escalation pathways that support clear, consistent and auditable outcomes. 
• Lead the safe and governed use of AI for alert enrichment, correlation, prioritisation and response recommendations, with appropriate human oversight. 
• Act as the operational lead for cyber security incidents, coordinating technical teams, Legal, Risk, Communications and external responders as required. 
• Maintain and improve incident response and disaster recovery plans, including regular testing to assess readiness.
• Own and evolve key security operations platforms, ensuring tools, services and vendor arrangements meet current and future business needs.
• Partner with Procurement and Technology on vendor evaluations, proof-of-value activities, service scope, SLAs, KPIs, renewals and uplift discussions. 
• Take direct responsibility for the ongoing management and continual improvement of Corrs’ ISO/IEC 27001:2022 Information Security Management System. 
• Translate operational data into clear executive-level insights, including security performance, vendor effectiveness, automation value and cost efficiency.

You will be a confident and commercially minded security operations professional who can balance technical depth with strong stakeholder engagement, governance discipline and practical judgement.

You will bring:

• Experience leading security operations, incident response or cyber security functions in a medium to large corporate environment. 
• Strong knowledge of security standards and obligations, including ISO/IEC 27001, ACSC Essential Eight and relevant aspects of the Australian Privacy Act.
• Proven experience managing and sustaining an ISO/IEC 27001:2022 Information Security Management System, including audit preparation, evidence management and coordination with external auditors.
• A strong understanding of security operations tooling, operating models and service provider environments. 
• Experience working with vendors and managed or co-managed service providers in operational environments. 
• The ability to communicate clearly with technical teams, business stakeholders and executive audiences. 
• Strong analytical and critical thinking skills, particularly in high-risk or time-sensitive situations.
• The ability to balance technical, legal, regulatory, reputational and commercial considerations.

Experience selecting, implementing or operating SOAR or AI-enabled security platforms will be highly regarded. Experience contributing to commercial negotiations, SLA reviews, KPI discussions, renewals or service uplift activities will also be highly valued.

Why this role?