Open to opportunities

Nathan Morelli

@nathanmorelli

Message

Successful cyber security leader with extensive management experience.

Australia

Message

What I'm looking for

I am looking for a role that fosters innovation, values collaboration, and supports professional growth in cyber security.

I am a successful cyber security leader with a wealth of experience across defense, consulting, and both private and public organizations. My current role as Head of Cyber Security and IT Resilience at SA Power Networks has allowed me to lead a team of 25-30 professionals while managing significant operational and capital budgets. I have developed and executed strategic initiatives that have not only enhanced our cyber security posture but also aligned with the Australian Energy Sector Cyber Security Framework, achieving a maturity level of 1.95 ahead of schedule.

My journey has been marked by a commitment to stakeholder engagement and community growth in the cyber security sector. I actively contribute to the Australian Information Security Association as the Adelaide Branch Chair and engage in various speaking opportunities at conferences on topics such as IT resilience and privacy. I take pride in building high-performing teams, fostering a culture of excellence, and driving measurable outcomes that align with organizational goals.

Experience

Work history, roles, and key accomplishments

Current

Head of Cyber Security and IT Resilience

Current

SA Power Networks Group

Aug 2020 - Present (4 years 10 months)

Led the capability responsible for protecting the reliability and integrity of SA Power Networks systems through cyber security risk management, proactive threat-led operations, and modern digital identity management. Developed and executed Cyber Security and IT Resilience strategy and roadmaps through to 2030, managing over $8M in operational and capital budgets.

Risk Management Identity Management Strategic Planning Budget Management Stakeholder Engagement Team Leadership Governance

Cyber Security Specialist

Naval Group Australia

Mar 2019 - Present (6 years 3 months)

Provided Protective Security & Cyberworthiness strategy and deliverables for Naval Group Australia and France in the SEA 1000 Future Submarine Program. Managed Cyberworthiness for the SEA1000 Platform System, covering Cyber, Physical, and Emanation Security for submarine and shipyard design and construction.

Cyberworthiness Compliance Stakeholder Engagement Bid Management Submarine Systems Physical Security

Director, Australian Cyber Security Centre

Australian Signals Directorate (ASD)

Jan 2018 - Present (7 years 5 months)

Delivered the Adelaide node of the ACSC’s strategy and program, including the Joint Cyber Security Centre, incident response, and exercises. Collaborated with business, government, and academic partners to investigate and develop solutions to cyber security threats.

Engagement Incident Response Stakeholder Management Threat Intelligence Sector Resilience

Manager, ICT Assurance

Department for Education, South Australia

Oct 2014 - Present (10 years 8 months)

Managed ICT Assurance for the Department for Education, South Australia. Ensured the integrity and security of information and communication technology systems.

Information Security Risk Management Compliance IT Governance Policy Development Data Protection Network Security

Manager, IT Advisory

Jan 2012 - Present (13 years 5 months)

Provided IT Advisory services to clients, focusing on strategic IT initiatives and technology solutions. Advised on various aspects of information technology, including security and risk management.

Risk Management Security Consulting Client Management Project Management Data Analysis Compliance

Senior Information Security Consultant

CQR Consulting

Sep 2010 - Present (14 years 9 months)

Served as a Senior Information Security Consultant, providing expert advice and solutions in information security. Conducted security assessments and developed security strategies for clients.

Information Security Security Consulting Information Security Strategy Penetration Testing Vulnerability Management Compliance Security Architecture Incident Response Client Engagement

Network and Security Specialist

Government of South Australia

Aug 2009 - Present (15 years 10 months)

Worked as a Network and Security Specialist, focusing on the design, implementation, and maintenance of secure network infrastructures. Ensured the protection of government data and systems.

Network Security Network Architecture Intrusion Detection VPN Security Operations System Administration Data Protection

Information Security Specialist

University of Adelaide

Feb 2008 - Present (17 years 4 months)

Served as an Information Security Specialist, responsible for protecting the university's information assets and systems. Implemented security policies and conducted security audits.

Information Security Security Policies Security Auditing Risk Management Data Privacy Access Control Security Awareness Incident Response Compliance

ICT Operations - Security and Network Architect

SA Water Corporation

Jun 2007 - Present (18 years)

Worked in ICT Operations as a Security and Network Architect, designing and implementing secure network solutions for critical infrastructure. Focused on maintaining the integrity and availability of ICT systems.

Security Architecture System Integration Network Protocols Security Best Practices Disaster Recovery Business Continuity Compliance

Information Technology Advisory - Senior Advisor

KPMG Adelaide

Dec 2004 - Present (20 years 6 months)

Served as a Senior Advisor in Information Technology Advisory, providing consulting services on IT strategy, risk management, and security. Assisted clients in optimizing their IT environments.

Risk Management Security Consulting Business Analysis Project Management Client Relationship Management Compliance Data Governance Process Improvement

Education

Degrees, certifications, and relevant coursework

University of South Australia

Bachelor of Business Information Systems, Business Information Systems

Studied foundational concepts in business and information technology. Developed skills in systems analysis, database management, and business process optimization.

University of South Australia

Master of Business Information Systems, Business Information Systems

Pursued advanced studies in the strategic application of information systems in business. Focused on complex problem-solving, IT governance, and enterprise architecture.