CYBER SECURITY ENGINEER

About The Role

Austco Healthcare is seeking an experienced Fractional CISO to lead enterprise cybersecurity strategy across a growing global organization. This is a strategic, hands-on leadership role, responsible for unifying security across Austco's corporate entity and its acquired subsidiaries, all regions, and any future acquisitions.

Location: Dallas, TX (with travel to regional offices as required). Engagement Type: Contract / Fractional (part-time). Commitment: Approx. 2–3 days per week, ongoing. Reports to: CEO.

About Austco Healthcare

Austco Healthcare Limited (ASX: AHC) is a global provider of clinical communication, workflow and real-time location technology. Founded in 1986, Austco's IP-native Tacera nurse call platform, Medicom nurse call solution, Pulse workflow suite and Built-in RTLS capability are deployed in hospitals and aged care facilities across more than 60 countries. Headquartered in Australia, Austco operates across six countries with a global workforce of approximately 350 employees, supporting healthcare providers to deliver safer, smarter and more efficient care.

Responsibilities

• Security Strategy & Governance
  • Develop and own the enterprise information security strategy aligned to business objectives across Austco and all subsidiaries
  • Drive adoption of a centralized, managed IT operating model and advance maturity against the ACSC Essential Eight
  • Establish and maintain security policies, standards, and frameworks (NIST CSF, ISO 27001, SOC 2, ACSC Essential Eight)
  • Chair or advise the security steering committee; report to the Board on risk posture and maturity progress
  • Lead IT roadmap planning and migration of infrastructure to cloud-based environments (AWS and equivalent), establishing a centralized IT operating model
• Acquisition Integration & Subsidiary Alignment
  • Engage Austco's subsidiaries to align their IT domains with the enterprise security framework
  • Evaluate and integrate future acquisitions from a security and IT perspective — assessing posture, risks, and integration requirements
  • Work across all Austco regions (US, Canada, Australia, UK, Singapore, New Zealand) to drive consistent adoption of security objectives
• Risk & Compliance
  • Lead risk assessments and manage the organizational risk register
  • Ensure compliance with HIPAA, HITECH, and applicable international data privacy regulations (GDPR, Australian Privacy Act, PDPA)
  • Oversee third-party and vendor risk, including managed service provider (MSP) relationships
• Incident Response & Operations
  • Own the incident response plan and lead response to significant security events
  • Serve as a key escalation point within Austco's Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP)
  • Partner with IT teams and the MSP on vulnerability management, security architecture, and operational security
  • Drive security awareness training across all global offices
• Leadership & Stakeholder Management
  • Manage local IT teams across subsidiaries and regions, providing direction, oversight, and mentorship
  • Act as the primary interface with the managed service provider (MSP), ensuring service levels and security standards are met
  • Serve as the internal and external-facing security authority for Austco
  • Advise on security implications of M&A activity, product development, and infrastructure changes

What Success Looks Like in The First 6 to 12 Months

• A unified, centralized IT operating model established across the corporate entity and the ANZ subsidiaries
• Measurable progress against the ACSC Essential Eight, to a maturity level agreed with the Board
• Enterprise security policies, standards and a live organizational risk register adopted group wide
• An approved cloud migration roadmap underway
• Incident response, business continuity and disaster recovery plans validated through at least one tabletop exercise
• Security and IT integration plans agreed for each Austco subsidiary

Requirements

• 10+ years in information security, with at least 3 years in a CISO or senior security leadership role
• Demonstrated success leading security transformation in complex, multi-entity or post-acquisition environments
• Proven ability to drive organizational change, including transitioning decentralized IT environments to centralized/managed models
• Experience building and executing IT roadmaps, including cloud migration (AWS or equivalent)
• Strong knowledge of HIPAA/HITECH, NIST CSF, ISO 27001, SOC 2, and the ACSC Essential Eight
• Experience operating across multiple international jurisdictions
• Strong executive communication and board-level reporting skills
• Availability for on-call incident response; willing to serve as the security escalation point for BCP/DRP events
• Ability to operate autonomously with minimal day-to-day supervision

Preferred Qualifications

• CISSP, CISM, or CISA certification
• Experience with IEC 62443 or medical device cybersecurity standards (FDA pre/post-market guidance)
• Background supporting SaaS or cloud-based product companies
• Familiarity with US, Canadian, New Zealand, Australian, UK, and Singapore regulatory environments