About Snowy:
Snowy Hydro is a dynamic, integrated energy business that has been providing on-demand, reliable energy to Australia for generations. Snowy Hydro owns and operates a powerful combination of generation assets, including the iconic Snowy Hydro-electric Scheme, gas and diesel electricity generating plants, and contracted wind and solar energy in the National Electricity Market. We also provide electricity and gas to over 1.5 million retail customers through our retail brands Red Energy and Lumo Energy.
Snowy 2.0, currently under construction, is Australia's largest committed renewable energy project. This nation-building project will provide on-demand energy and large-scale storage for many generations to come.
About the position:
We are currently seeking an experienced Cyber Security Operations Manager to direct, oversee, and elevate our daily cyber security operations across both IT and operational technology (OT) environments.
In this key leadership role supporting the Head of Cyber Security, you will lead a dedicated team of security specialists, incident response engineers, and analysts. You will be responsible for ensuring team operational readiness, optimising detection engineering and automation, managing major security incidents, and collaborating closely with risk and resilience teams on BCP/DR tabletop exercises. As an enterprise-grade technical leader and curious problem solver, you will also bridge the gap between technical operations and senior executive leadership.
This role offers flexible working arrangements with opportunities to collaborate across our Snowy Hydro teams.
Key Responsibilities:
-
Security Operations & Incident Command: Manage daily SOC monitoring capabilities, detection platforms, and incident triage workflows across critical IT and OT environments. Act as Incident Manager during major cyber security incidents, directing technical containment, executive briefings, and post-incident root cause analysis.
-
Continuous Capability Uplift & Automation: Drive the ongoing optimisation of detection logic, threat intelligence integration, and automated SOAR playbooks to lower MTTD and MTTR. Stay ahead of emerging threat vectors, including AI-related vulnerabilities and critical infrastructure risks.
-
Resilience & Disaster Preparedness: Partner with the Risk and Governance teams to conduct regular BCP/DR tabletop exercises, refine operational response playbooks, and ensure multi-tiered response readiness.
-
Partner & Vendor Management: Oversee Managed Detection and Response (MDR/MSSP) vendor performance, ensuring service levels, quality of analysis, and streamlined operational handoffs.
-
Team Leadership & Mentorship: Lead, mentor, and foster capability within a growing operational team (4–5 direct reports), cultivating a continuous learning environment, operational excellence, and team sustainability.
-
Executive Reporting & Stakeholder Engagement: Track SOC operational metrics and KPIs, preparing clear, strategic briefs and presentations for senior management, executive leadership, and board-level visibility.
About the location:
This role is based in Melbourne.
About you:
-
Proven Operational Leadership: Demonstrated leadership experience running a modern SOC or technical incident response team within an enterprise environment (e.g., banking/financial services, critical infrastructure, utilities, transport, FMCG, or top-tier consultancy).
-
Strong Technical Foundation: Extensive background working your way through technical cyber roles with practical depth across SIEM, EDR/XDR, SOAR, threat intelligence, and network detection technologies.
-
Inquisitive Problem Solver: A naturally curious mindset with a proactive drive to investigate complex issues, explore alternative paths, and implement sustainable solutions.
-
Decisive Crisis Leader: Calm and structured under pressure, with proven experience commanding major cyber incident responses and managing operational handoffs.
-
Executive Communication Skills: Exceptional ability to distill technical complexity into actionable insights for senior executives and diverse business stakeholders.
-
Qualifications & Certifications: Relevant industry certifications (e.g., CISSP, CISM, GIAC) or degree in Cyber Security, Computer Science, or Information Technology are highly regarded, though deep practical enterprise experience is prioritized.
-
Safety & Values Driven: Demonstrated commitment to safety leadership, ethical conduct, collaboration, and mutual accountability.
About our workforce:
Snowy Hydro has a culture of decency and inclusion, with a commitment to the health and wellbeing of our people and a supportive environment to ensure that everyone - regardless of background - feels included and can succeed. At Snowy Hydro, we recognise that we are made stronger by the unique capabilities and qualities that each individual brings, and we believe in providing an environment that allows that uniqueness to thrive.
Snowy Hydro is proud to be an Equal Opportunity employer. We are committed to the values of Equal Employment Opportunity and provide accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for a role with Snowy Hydro and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an email with your request to the Snowy Hydro recruitment team at recruitment@snowyhydro.com.au
