As Australian retail and e-commerce continue to expand at a pace, the risk landscape grows even faster. From payment fraud and customer data exposure to supply-chain disruption and ransomware, the threats facing consumer-facing brands are constantly evolving. What’s changing, too, is the role of cybersecurity leadership. It’s no longer just a technical function, but a board-level strategic driver of trust, resilience, and business growth.
In this environment, the CISOs and security leaders below are worth watching. Some hold the formal CISO title, while others lead cyber strategy from adjacent roles, but all share one common trait: they are shaping how Australia’s biggest consumer brands defend their customers, their platforms, and their reputations.
Jeffrey Choi — General Manager, Group Cyber, Coles Group
Jeffrey Choi is one of the most influential cybersecurity leaders in Australia’s retail sector, with over 20 years of experience across major global brands including Coles, Qantas, Westpac, News Corp, Coca-Cola, and Ericsson. In his current role at Coles, he is driving a multi-year Cyber Security Enablement Program while embedding a cyber-safety culture across a workforce of 130,000, a huge challenge in one of Australia’s largest retail operations.
Jeffrey is also widely recognised for building government partnerships and shaping national cybersecurity priorities through advisory roles in forums such as the Australian Aviation Cyber Council and the ACSC’s Joint Industry Advisory Group. His leadership is defined by blending technical depth with executive influence, turning cyber strategy into real operational resilience across complex, high-scale environments.
Sam Fariborz — Chief Information Security Officer (CISO), David Jones
Sam Fariborz leads security for David Jones, one of Australia’s most iconic retail brands. With a background in computer engineering and strong experience across IT infrastructure and enterprise transformation, Sam brings a strategic approach to security, viewing it as a driver of resilience and innovation, not a business constraint.
She is widely recognised in the industry for her thought leadership and was named AISA’s Cybersecurity Professional of the Year in 2024. Her role at David Jones is increasingly relevant as the retail industry shifts into omnichannel and digital-first customer experiences, where secure-by-design approaches are essential for growth.
Nigel Hedges — Executive General Manager, Cyber & Risk (CISO), Chemist Warehouse
Nigel Hedges is a veteran security leader with a strong focus on strategy, culture, and program delivery. He leads cyber and risk for Chemist Warehouse, the post-merger entity of Sigma Healthcare and Chemist Warehouse, which operates across retail and healthcare distribution.
His experience spans governance, crisis management, AI governance, privacy and enterprise risk, making him a key figure in the retail ecosystem, where customer data and regulatory expectations are intensifying. Nigel’s leadership is notable for combining technical depth with a people-first approach to building cyber-capable teams.
Daniel Eastley — Head of Group Cybersecurity, JB Hi-Fi
Daniel Eastley brings a pragmatic, business-led approach to cybersecurity leadership at JB Hi-Fi, one of Australia’s largest consumer electronics retailers. He is known for translating complex risk into clear decisions and aligning technology investment with commercial outcomes — a crucial skill in fast-moving retail environments where speed and security must coexist.
While his role is not formally titled “CISO,” he functions as the organisation’s security leader and is central to strengthening cyber resilience across both physical and digital retail channels.
Lukasz Gogolkiewicz — Head of Cyber Security, Accent Group
Lukasz Gogolkiewicz is responsible for cybersecurity across Accent Group, which operates more than 800 stores and 34 brands across Australia and New Zealand. With two decades of experience, he brings deep expertise across financial services, government, and consumer brands, positioning him as a key leader in retail security.
He was actively involved in mentoring and supporting women in security through his board role with the Australian Women in Security Network. In a retail world increasingly shaped by digital customer journeys, Lukasz’s role is critical in protecting both customer trust and business continuity.
David Fiorina — Chief Information Security Officer (CISO), Bunnings
David Fiorina’s appointment as CISO at Bunnings marks an important milestone for one of Australia’s most trusted retail brands. Bunnings operates a massive network of stores, online channels, and customer services, making cybersecurity a core business priority.
Although he is relatively new in the role, his long tenure at the company and deep understanding of its operations make him a CISO to watch, especially as retail environments evolve into hybrid digital and physical experiences that demand strong security architecture and governance.
Samrat Seal — Head of Transformation & Governance | Cyber Security and AI/GenAI, Kmart Australia
Samrat Seal may not carry the traditional “CISO” title, but his role at Kmart Australia is deeply aligned with modern cybersecurity leadership. He oversees cybersecurity and AI governance within transformation and governance functions, bringing a strategic lens to secure-by-design engineering, platform governance, and enterprise architecture uplift.
His work is especially relevant as retailers adopt AI, automation, and cloud-based platforms at scale. Samrat represents the next wave of security leaders, not only protecting systems, but also shaping how the business transforms securely for the future.
Why These Leaders Matter
Retail and e-commerce are the front lines of customer trust, and cyber risk is now a core part of brand reputation. The leaders above are shaping how Australia’s biggest consumer brands protect customers, modernise safely, and build security into the foundation of digital growth. Whether they carry the CISO title or not, they all represent the evolving nature of security leadership in retail: strategic, business-driven, and future-focused.
