ASIC to Appoint New Tech and Data Leadership
The Australian Securities and Investments Commission will hire a new CISO, CDAO, and CTO following executive departures.
Updated on Oct. 15, 2026 in People

Live Poll
Does high executive turnover in government agencies make you lose trust in their digital services?
The Australian Securities and Investments Commission will soon see the departure of two key leaders, with CISO Jamie Norton and data and analytics executive Graham Jefferson both leaving in mid-December 2026. To fill these gaps, the agency has launched recruitment for a new CISO, a chief data and analytics officer, and a newly created CTO role.
Why it matters
These leadership changes come as the regulator seeks to maintain continuity for its critical digital projects. Replacing these senior figures is essential for the agency to continue its ongoing cyber security transformation and the RegistryConnect initiative through the 2027-28 financial year.
Jamie Norton served for one year and eight months as CISO, while the commission currently operates in the third year of a four-year cyber security transformation programme.
The players
Australian Securities and Investments Commission
This is the primary Australian government regulator responsible for market integrity and corporate conduct.
Jamie Norton
He is the outgoing chief information security officer who has served in the position for 20 months.
Graham Jefferson
He serves as the senior executive leader for data, analytics and AI, a role currently being rebranded.
Paul Franklin
He is a senior official at the agency to whom the new contract CTO will report.
The details
The new CTO position is a contract role specifically tasked with overseeing security and technology deliverables for the RegistryConnect programme, reporting to Paul Franklin. This incoming executive will join the digital, data and technology leadership team as the agency aims to stabilise business registers.
Timeline
Jamie Norton and Graham Jefferson will depart their roles by mid-December 2026.
The RegistryConnect stabilization programme is scheduled to conclude at the end of the 2027-28 financial year.
Market Landscape
The leadership refresh aligns with the Australian government's Cyber Security Transformation Programme to modernise national regulatory infrastructure. This move positions the commission to maintain its technical momentum against the evolving demands of business registry security.
The ongoing transition aims to ensure that business registers remain stable and secure for the public and corporate entities. Readers can expect the agency to maintain its current digital services throughout the executive recruitment period.
The takeaway
Maintaining steady leadership is a priority for government agencies managing large-scale national data programmes. Agencies typically utilise interim strategies or structured hiring cycles to bridge the gap during executive turnover.
Further reading
For more information on national regulatory staff changes, visit the People section.
Source note: This article includes information reported by ITnews.
Live Poll
Does high executive turnover in government agencies make you lose trust in their digital services?










