The major CISO shifts in 2024

2024 kicked off with a bang when Coles Group snared Qantas CISO Jeffrey Choi as its general manager of cyber security and identity. Choi previously spent six-and-a-half years as group CISO at the airline.

AMP landed HSBC’s former chief information security officer (CISO) for Australia and head of the Australasia cluster Jean-Baptiste Bres. He replaced Elrich Engel who departed after four years at AMP. 

Following the departure of Jeffrey Choi in January, Qantas promoted its head of its Group Cyber Security Centre, Matt Biber, to the role of CISO, first in an acting capacity and then as Choi's permanent replacement. 

February saw military intelligence veteran Michelle McGuinness take over as national cyber security coordinator by the Department of Home Affairs. She has been in the Australian Defence Force for 30 years, working "in a range of roles in Australia and internationally".

The autumn saw Macquarie’s banking and financial services (BFS) chief information security officer of two years Steven Rebello take over as Endeavour Group CISO. Endeavour Group, which owns retailers like Dan Murphy’s and BWS, appointed Rebello as it progresses through its multi-year One Endeavour Transformation program. 

In May, the Australian Digital Health Agency promoted its acting CISO Danielle Pentony to the permanent position. Pentony is now developing the next phase of ADHA's cyber security program to run from this year onwards.

May also saw Commonwealth Bank of Australia elevate its chief information security officer of six months Nicola Nicol to the role of chief security officer following the departure of Brendan Goode. She now oversees a team of 1000 security staff and is described as playing a "vital role" at the bank. 

In July, Australia Post announced it had hired group general manager of cyber security and risk at Asahi Beverages, Adam Cartwright, as its new CISO. Cartwright replaced Australia Post's long-time security chief Glenn Stuttard.

In August, the Lottery Corporation named Celeste Lowe as its new chief information security officer, leading - among other things - a three-year cyber security uplift program of work. Lowe joined the company from Ventia, where she had been general manager of cyber security. 

At the end of September, CSIRO hired former Lion security director Jamie Rossato to fill its vacant CISO position. He is now charged with overseeing CSIRO’s cyber security program, including the integration with overall protective security.

October began with the Department of Health and Aged Care's appointment of Services Australia’s David Lang as its new cyber security leader. Taking on the title of assistant secretary, cyber security branch and CISO, Lang was tasked with overseeing the department's "in-flight cyber security uplift program". 

Following the departure of Shannon Jurkovic in June, Bendigo and Adelaide Bank appointed ANZ’s Gajan Ananthapavan as its new chief information security officer. Ananthapavan's appointment in October came as the bank said it was making “significant progress on its [technology] transformation program”.

2024 closed with the appointment of Christie Lim as Victoria's Department of Government Services (DGS) director of cyber operations. She joined the department from Vicinity Centres, where she was general manager for cyber and information security.