SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
LEAP Dev is the software house behind LEAP Legal Software, a leading legal practice management platform used by over 100,000 lawyers globally. Part of ATI Global, a major international LegalTech company, LEAP operates across Australia, Canada, the US, UK, Ireland, Poland, and New Zealand with over 1,000 employees.
The Security team protects LEAP's people, information, infrastructure, and applications from evolving cyber threats. It spans three specialist domains: Platform Security Engineering, Enterprise Security, and Governance, Risk & Compliance. The team values collaboration, shared ownership, and high standards while staying ahead of emerging threats using modern threat intelligence and tools.
As Cyber Security Manager, you will own identity, endpoint, and Microsoft 365 security across LEAP while supporting the broader information security and compliance program. This senior role blends hands-on technical ownership with stakeholder leadership, reporting directly to the CISO. You'll shape how identity, endpoint, and vulnerability management practices evolve and directly contribute to maturing LEAP's SOC 2 and ISO 27001 programs.
Key responsibilities include: administering security technologies and policies across the Microsoft ecosystem (Entra ID, Exchange Online, SharePoint, OneDrive, Teams, Intune); owning SaaS application security posture by reviewing API permissions and third-party integrations; developing and testing incident response playbooks; maintaining endpoint detection and response tooling like CrowdStrike; leading security risk and vulnerability reviews; serving as subject matter expert for audits and assurance activities; partnering with stakeholders on security requirements; and designing security awareness programs.
You bring proven experience in information security or cyber security leadership, ideally in enterprise environments. You have strong understanding of security governance, risk, and compliance frameworks (SOC 2, ISO 27001, NIST, ISO 42001). Hands-on experience with Microsoft 365 security tooling is essential. You're comfortable managing security risks, controls, and assurance activities including audits and remediation. You communicate risk concepts clearly to both technical and non-technical audiences and hold industry certifications such as CISSP, CISM, or Microsoft security certifications (SC-300, SC-200). You take ownership of security issues, build trusted relationships across IT and engineering, balance hands-on delivery with leadership, and are the go-to person for identity and endpoint security.
