About True:

At True, we're on a mission to create a world of healthier people.

True Protein was born out of a desire to empower our community in living energetic and fulfilled lives. Since 2014, we have pioneered a new standard in health and performance products, delivering natural, authentic and transparent products without compromise.

This all begins within our own True Team, a high performing group of like-minded individuals who truly believe in and strive to embody our company values in all that we do, both in our personal and professional lives. Australian owned but looking to conquer the world, we are continuously growing our team with creative and community-minded people.

About the role

We’re looking for an experienced Cyber Security & IT Manager to take ongoing ownership of our security posture and day-to-day IT operations across both businesses. You’ll be the in-house authority on security, partnering with our executive team, external advisors, and specialist delivery partners to keep our environment safe, while also supporting the businesses IT Support needs. This is a varied and hands on role.

We’re an AI-forward team. AI is embedded in how we work across engineering, marketing, and operations, and need all Tech team members to use AI wherever possible to work faster, sharper, and smarter. Equally, AI introduces a new class of threats we need to actively defend against, and this role will play a leading part in shaping how we do that safely.

What your day to day will look like:

Security leadership & operationsOwn and continuously improve our security programme aligned to industry frameworks (Essential Eight, ISO 27001 principles).

Administer and tune our Microsoft security stack, including Defender, Entra ID, Intune, and Conditional Access.

Manage identity and access lifecycle: joiner/mover/leaver, privileged access, MFA, and periodic access reviews.

Maintain and exercise our incident response, business continuity, and disaster recovery playbooks.

Lead our security awareness, phishing simulation, and training programme.

Oversee credential management and secrets hygiene across the business.

Partner with our external security advisors, auditors, and delivery partners.

Track and report on security KPIs and risk register .Defend the business against emerging AI-related threats, including prompt injection, model misuse, data exfiltration via AI tools, and AI-enabled phishing and social engineering.

Lead our safe adoption of AI tools across the business, covering acceptable use, data handling, and guardrails on the tooling our teams use every day.IT SupportProvide trusted day-to-day support to the business on Microsoft 365, endpoints, and collaboration tools.

Manage endpoint estate via Intune (device compliance, patching, configuration baselines).

Own onboarding and offboarding workflows end to end.

Manage relationships with IT vendors and service providers.

Support platform migrations and consolidation projects across our environment (identity, mailbox, file, and endpoint), including Microsoft 365 to Google Workspace migration work as we align both businesses onto a single stack.

Keep our on-premises environment (network, Wi-Fi, small server footprint) running smoothly.

What you’ll bring to the team:5+ years in a hands-on security or security-adjacent IT role within a mid-sized Australian business.

Deep working knowledge of the Microsoft 365 ecosystem (Entra ID, Intune, Defender, Purview, Conditional Access).

Strong understanding of Australian cyber security frameworks, particularly the ASD Essential Eight.

Solid grasp of identity, MFA, privileged access management, and least-privilege principles.

Comfortable owning incidents end to end and writing clear, useful documentation.A pragmatic, risk-based mindset. You understand the difference between secure and “compliance theatre”.

Strong communication skills with both technical and non-technical audiences.

Actively uses AI tools (ChatGPT, Claude, Copilot, or similar) in day-to-day work, and can point to concrete examples of where it has made you meaningfully more effective.

Familiarity with EDR platforms (CrowdStrike, SentinelOne, or similar).

Hands-on experience delivering IT migrations (tenant, mailbox, identity, or file), particularly Microsoft 365 to Google Workspace.

Exposure to AI security topics such as model risk, prompt injection defence, or AI usage governance.

Industry certifications (SC-200, SC-300, AZ-500, CISM, Security+ or equivalent) desirable.

Experience in e-commerce or manufacturing environments desirable.

Why You'll Love

Working at True

Fun, dynamic, and collaborative work environment4 additional leave days per year
Onsite staff gym, sauna and ice bath
Northern Beaches location with onsite parking
Generous discounts on True Products
Frequent team events and celebrations
Plenty of learning and development opportunities
Flexible working hours when required to suit your lifestyle.

Please note that we are not open to sponsorship for this position and require full working rights without restriction.