Remote opportunity at
UpGuardChief Information Security Officer
UpGuard is expanding its infrastructure to process billions of daily risk signals through its Cyber Risk Posture Management platform. The company is hiring a Chief Information…
Career Tools
About This Role
UpGuard is expanding its infrastructure to process billions of daily risk signals through its Cyber Risk Posture Management platform. The company is hiring a Chief Information Security Officer to oversee the complete enterprise technology stack, combining security, infrastructure, identity, networking, cloud platforms, and workplace technology under a single leader. This is an unconventional CISO position tailored for someone with a strong background in running infrastructure and operations at scale who…
Job Description
UpGuard is expanding its infrastructure to process billions of daily risk signals through its Cyber Risk Posture Management platform. The company is hiring a Chief Information Security Officer to oversee the complete enterprise technology stack, combining security, infrastructure, identity, networking, cloud platforms, and workplace technology under a single leader. This is an unconventional CISO position tailored for someone with a strong background in running infrastructure and operations at scale who layers security over those systems.
The inherited environment operates lean and utilizes a specific tech stack that includes Google Workspace, Okta, macOS, ChromeOS, and managed browsers for BYOD, intentionally avoiding Microsoft directories or desktop footprints. Reporting directly to the CEO, the incoming leader will manage a nine-person team spanning IT operations, security operations, cloud platform engineering, and governance, risk, and compliance. Responsibilities include advancing detection and response capabilities through Google SecOps and n8n, managing end-to-end identity and access, securing the cloud and network perimeters via zero-trust access, overseeing global end-user computing and physical workspaces, and directing compliance programs.
Additionally, the person in this role will act as customer zero, utilizing the company platform extensively to feed operational insights back into product development, sales, and customer success teams. Candidates should possess a deep infrastructure foundation, process discipline from consequential environments, hands-on architectural capability, and a proven ability to scale operations efficiently through automation rather than headcount.
Responsibilities
- Manage the complete technology and security remit encompassing enterprise infrastructure, security, identity, applications, and workplace technology
- Lead and mentor three functions including IT and Security Operations, Cloud Platform Engineering, and GRC, setting technical standards while maintaining a lean team structure
- Enhance security operations by investing in Google SecOps and n8n automation for advanced detection, orchestration, and response across enterprise and product systems
- Oversee end-to-end identity and access management across GCP projects and the global workforce, covering joiner/mover/leaver processes, privileged access, and OAuth consent risk
- Direct the network and cloud perimeter using zero-trust network access as the strategic model alongside GCP perimeter security
- Manage global end-user computing hardware, primarily consisting of a macOS fleet alongside ChromeOS and managed browser services for BYOD
- Supervise technology and physical security services for company offices across Australia and the United States
- Oversee the compliance program, including existing SOC 2 Type II operations and targeted ISO 27001 certification
- Act as customer zero by utilizing the platform beyond standard use cases and sharing operational feedback with product and sales teams
- Brief executive leadership, the Steering Committee, and the Board, and communicate with customer security teams
Requirements
- Infrastructure and operations foundation with experience running a data centre or substantial operations function where security became part of the remit
- Process discipline gained from operating environments where failure carried real consequences
- Demonstrated ability to scale capabilities through automation rather than heavy headcount resourcing
- Hands-on technical capability to architect controls, review Terraform changes, or lead incident responses directly
- Cloud-native depth with substantial Google Cloud Platform experience or deep transferrable AWS/Azure background
- Accountable ownership experience taking a compliance program such as SOC 2 or ISO 27001 through audit
- Ability to absorb context rapidly during a structured handover and operate in a fast-paced environment
Core Skills
Benefits
- Monthly lifestyle subsidy for financial, physical, and mental well-being
- Work-from-home set-up allowance provided within the first three months
- $1,500 USD annual learning and development allowance
- Paid time off plus two additional company leave days
- 18 weeks of paid parental leave regardless of parenting role
- Personal leave allowance covering sick and carer's leave
- Top-spec laptop provided for the role
- Generative AI tool subscription subsidy
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this a remote role?
Yes, this is a fully remote working environment with no compulsory attendance required at the physical offices in Sydney and Hobart.
Who does this position report to?
The Chief Information Security Officer reports directly to the Chief Executive Officer.
What is the salary for this position?
The salary for this position is not stated in the job posting.
What team size will the incoming CISO manage?
The team currently consists of nine full-time equivalents distributed across four functions: IT Operations, Security Operations, Cloud Platform Engineering, and GRC.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
