Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 31 days ago

Head of IT & Security

Diraq14 open roles

Where
Santa Monica - USA, United States
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowHead of IT & SecurityDiraq · Santa Monica - USA, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Diraq's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 31 days ago

The posting

Job description

Role Purpose: You’ll lead Diraq’s global IT and cyber security operations, reporting into the executive team. Your job is to make sure technology and security services and controls are properly resourced, well run and improving, so Diraq can support secure, reliable and scalable research, engineering and business operations across Australia and the United States. This is a leader-of-leaders role. You’ll set direction, build the operating model, decide where people and budget go, manage the risks that matter and hold two functional managers to their plans. Day-to-day platforms, tooling, service queues and technical processes sit with those managers. This is a scale-up, so staying close enough to the technical detail to step in where needed is part of the role. About the Role: You’ll lead through two managers: IT & Infrastructure, and IT Security Operations. Your job is to make sure both teams have clear ownership, capable leadership, processes suited to Diraq’s size, effective controls, and enough capacity to keep pace with growth. You’ll work closely with the Information Security & Risk Manager, turning the requirements set through the ISMS, security standards and risk framework into funded, operational capability. You’ll also give the CFO and Executive Leadership Team a clear view of how services are performing, where the risks are, where investment should go and what decisions are needed. Key Accountabilities: What You’ll Own

  • Strategy and operating model: you’ll set the global IT and security operations strategy, operating model and roadmap, keep it scalable as Diraq grows, and give the CFO and Executive Leadership Team a clear view of performance, risk and investment priorities. Security risk and control reporting flowing through the ISMS forums owned by the Information Security & Risk function.
  • Leadership: you’ll manage, coach and develop the IT & Infrastructure Manager and the IT Security Operations Manager, build depth and succession beneath them, and run a team that research, engineering and corporate colleagues find easy to work with.
  • Service performance: you’ll run IT and security operations to agreed service levels and control requirements across labs, engineering, research and corporate, address the causes of recurring problems rather than the symptoms, and keep a realistic view of readiness, capacity and key-person risk.
  • Cyber security operations: you’ll make sure monitoring, detection, response and vulnerability remediation are working as intended, act as the senior escalation point during major incidents under the incident framework owned by the Information Security & Risk function, and convert the lessons into funded fixes that get delivered.
  • Identity, backup and recovery: you’ll run identity and access management and the joiner, mover and leaver process, implement the access and least-privilege standards set by the Information Security & Risk function, and keep backup and disaster recovery tested against the recovery objectives agreed through business continuity governance.
  • Secure engineering: you’ll give Engineering the DevSecOps tooling and the repository, secrets and supply chain security capability needed to meet the requirements set by the Information Security & Risk function, while Engineering remains responsible for adoption in its own pipelines.
  • Budget and partners: you’ll run the IT and security portfolio budget and investment plan, hold vendors and managed service providers to clear commercial outcomes, and make sure the security requirements set by the Information Security & Risk function are reflected in contracts.
  • 10+ years across technology, infrastructure, cyber security or IT service environments, including time leading managers.
  • A track record of building and scaling operating models in global or distributed technology teams.
  • Strong practical understanding of cloud, infrastructure, identity, cyber security operations, resilience and service management, with the judgement to direct specialists without becoming the primary operator.
  • Experience managing material budgets, investment portfolios, vendors and service providers, and translating operational data into executive decisions.
  • You’re able to get outcomes through influence across Engineering, Research, Finance, Legal, Security Governance and People & Culture.
  • You’ve led through major operational or cyber incidents at a senior level.
  • Experience in deep-tech, semiconductor, quantum, defence or R&D environments is highly desirable.
  • Strategy and operating model: you’ll set the global IT and security operations strategy, operating model and roadmap, keep it scalable as Diraq grows, and give the CFO and Executive Leadership Team a clear view of performance, risk and investment priorities. Security risk and control reporting flowing through the ISMS forums owned by the Information Security & Risk function.
  • Leadership: you’ll manage, coach and develop the IT & Infrastructure Manager and the IT Security Operations Manager, build depth and succession beneath them, and run a team that research, engineering and corporate colleagues find easy to work with.
  • Service performance: you’ll run IT and security operations to agreed service levels and control requirements across labs, engineering, research and corporate, address the causes of recurring problems rather than the symptoms, and keep a realistic view of readiness, capacity and key-person risk.
  • Cyber security operations: you’ll make sure monitoring, detection, response and vulnerability remediation are working as intended, act as the senior escalation point during major incidents under the incident framework owned by the Information Security & Risk function, and convert the lessons into funded fixes that get delivered.
  • Identity, backup and recovery: you’ll run identity and access management and the joiner, mover and leaver process, implement the access and least-privilege standards set by the Information Security & Risk function, and keep backup and disaster recovery tested against the recovery objectives agreed through business continuity governance.
  • Secure engineering: you’ll give Engineering the DevSecOps tooling and the repository, secrets and supply chain security capability needed to meet the requirements set by the Information Security & Risk function, while Engineering remains responsible for adoption in its own pipelines.
  • Budget and partners: you’ll run the IT and security portfolio budget and investment plan, hold vendors and managed service providers to clear commercial outcomes, and make sure the security requirements set by the Information Security & Risk function are reflected in contracts.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Diraq's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Diraq's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Diraq's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.