Cybersecurity and IT Operations Lead

About the role

Alaya is seeking a seasoned Cybersecurity and IT Operations Lead to own and elevate its security posture and IT service delivery. This one‑year fixed‑term position is hybrid, allowing work across our Nepal and Australian offices while collaborating closely with the Sydney team.

Key responsibilities

• Own and manage the ISO 27001 certified ISMS, leading risk assessments, threat analysis, incident review and response.
• Co‑lead ISO audits, drive security controls, and set standards for in‑house AI systems and third‑party vendors.
• Oversee daily IT support/help‑desk operations, SLA compliance, and multi‑office network architecture, including firewalls, bandwidth and ISP management.
• Manage IT assets, procurement, and SaaS platforms such as Google Workspace, Microsoft 365 and VoIP solutions.
• Lead, mentor and develop the combined IT and security team, aligning cybersecurity and IT strategies with business goals.

Required profile

• Strategic thinker with a hands‑on mindset and ability to stay calm under pressure.
• Proactive in identifying gaps and enforcing standards across teams.
• Passionate about current cybersecurity trends and continuous improvement.
• Excellent at translating technical issues into actionable business insights.

Required skills

• ISO 27001 implementation and audit experience
• Risk assessment, threat analysis, incident response
• Endpoint Detection & Response (EDR), firewalls, Identity & Access Management (IAM)
• Network architecture, bandwidth and ISP management
• IT Service Management (ITSM) processes
• Google Workspace, Microsoft 365, VoIP administration

What we offer

• Opportunity to shape a resilient, secure and scalable tech environment
• Hybrid work arrangement with international collaboration
• Potential contract extension for the right candidate