Head of Risk for Security of Critical Infrastructure (SOCI)

Job description

Employment Type Permanent Closing Date 17 Sept 2026 11:59pm Job Title Head of Risk for Security of Critical Infrastructure (SOCI) Job Summary Job Description Focus of the role Telstra operates in an environment where national security, cyber threat and regulatory expectations are increasing in pace, complexity and consequence. This role exists to ensure Telstra can demonstrate confident , end‑to‑end security compliance and risk posture across telecommunications critical infrastructure - spanning technology, operations, people, physical assets, suppliers and third‑party dependencies. Who We Are We're an iconic Aussie brand with a global footprint. Our purpose is to build a connected future so everyone can thrive. We're all about providing the best experience and delivering the best tech on the best network. This includes making Telstra the place you want to work. For you, that means a having career that grows with you, and working with a team powered by human connection that prioritises wellbeing and choice. What you'll do In this role, you will provide independent Line 2 leadership, oversight and strategic challenge across Telstra's critical infrastructure environment, ensuring risks and obligations are effectively identified, assessed and managed in accordance with the Security of Critical Infrastructure (SOCI) Act and associated regulatory obligations. As a recognised leader in Risk & Compliance with subject matter expertise in SOCI risk management, you will maintain deep expertise across the full spectrum of SOCI hazards and their potential impact on Telstra's critical assets. Working closely with Line 1 executives and delivery leaders, you will drive a consistent approach to hazard identification, risk assessment, control effectiveness and assurance across Telstra's domestic and international fixed and mobile networks, cloud infrastructure, operational environments and critical components. This includes providing enterprise leadership on key risk domains such as cyber security, supplier risk and operational resilience, while promoting a strong culture of accountability, preparedness and continuous improvement. The role will take an end-to-end view of critical infrastructure risk across the company, strengthening resilience outcomes, supporting regulatory compliance and helping ensure Telstra maintains the governance, assurance and operational capability expected of Australia's leading critical infrastructure provider. In this role, you will join a connected network of risk professionals who partner with leaders across the business to enable better decision-making, strengthen risk culture, and support Telstra to achieve its strategic objectives safely and sustainably. Key responsibilities will be: Providing enterprise-wide thought leadership on SOCI risk, resilience and regulatory compliance, shaping executive decision-making, strategic priorities, risk appetite and investment outcomes across Telstra's critical infrastructure landscape. Leading cross-functional engagement across Technology, Security, Operations, Procurement, Legal and Risk functions to drive a coordinated approach to managing critical infrastructure risks, influencing senior stakeholders and resolving complex risk, governance and compliance challenges. Maintaining and continuously maturing an integrated Line 2 view of material SOCI risks and controls across cyber, physical, personnel, operational and network, product & technology (NPT) supply‑chain domains to enable confident executive decision‑making, regulatory engagement and prioritised security investment. Ensuring Telstra can clearly demonstrate compliance with key SOCI requirements, including TSRMP‑aligned risk management programs, ‘protect your asset’ outcomes, mandatory cyber incident reporting, and notification of material changes. Assessing whether cyber security controls including privileged access, network segregation, monitoring, incident response and vulnerability management, are well designed and operating effectively to protect critical assets, manage threat exposure and support SOCI concepts of competent supervision and effective control Ensuring NPT supplier and delivery models are assessed through a security, cyber and national interest lens, ensuring third‑party arrangements support effective control, competent supervision and ongoing compliance. Defining & enforcing clear expectations for Line 1 teams regarding supplier due diligence, contractual controls, access management, data handling, monitoring and exit strategies. As high‑risk suppliers and delivery models are subject to relevant Line 2 assurance activity, validating that expected controls are implemented and operating effectively. What We Offer Performance-related pay Access to thousands of learning programs so you can level-up Global presence across 22 countries; opportunities to work where we do business. Purchased annual leave scheme Additional Telstra day off Additional 30% off Telstra products and services Toolkit provided (laptop + mobile phone + plan paid for) About you To be successful in this role, you’ll have: Experience managing security risk in regulated/critical environments, with strong SOCI knowledge, including an understanding of associated legislation and obligations. Experience as a senior leader in telecommunications risk & compliance Broad understanding of cyber, physical, people, operational and supply-chain risks. Experience assessing supplier/partner risk (access, data, control, offshore delivery). The ability to assess SOCI risk end to end across services, assets and dependencies. A good understanding of complex networks/infrastructure and how change impacts SOCI outcomes. Line 2 risk/compliance experience (controls testing, issues, exec reporting). Confident influencing senior leaders and challenging constructively. Clear communication skills with an ability to translate SOCI and risk for executives. The ability to work well in ambiguity; simplifies complexity and aligns teams (Line 2 independent). Interested? Apply now! If this opportunity sounds like a perfect fit for you, we'd encourage you to apply! To be considered for this role, please ensure a current copy of your CV is attached to your application. As part of your application with Telstra, you may receive communications from us on +61 440 135 548 (for job applications in Australia) and +1 (623) 400-7726 (for job applications in the Philippines and India).