Skip to content
CISO Spotlights

Career profile

Celeste Lowe

Chief Information Security Officer, The Lottery Corporation

Status
Role as of 15 August 2024, the date of the latest source
Appointed
15 August 2024
Published

By the CISO Spotlights Desk. Compiled from public records. Each statement below is drawn from the sources listed at the end.

As of August 2024, Celeste Lowe is the Chief Information Security Officer of The Lottery Corporation, appointed that month to lead the company's cyber security function.

Career path

Lowe's early cyber security experience included security positions at Deloitte and Telstra, where she served as director of the Cyber Intelligence Centre within Deloitte Australia's risk advisory practice.

She moved to Qantas, where she held a number of cyber roles over four years, including senior cyber analyst, before being appointed the airline's inaugural Chief Information Security Officer in 2017.

In 2020, Lowe joined Nine as group director of IT security, a newly created role at the media company.

In March 2021, Nine's Sydney operations were hit by a ransomware attack later identified as using MedusaLocker. Lowe worked alongside Nine's chief information and technology officer to contain the threat, trigger the company's incident response process, and lead forensic containment and isolation efforts until the attackers were confirmed removed from the environment.

Following the incident, Lowe helped accelerate Nine's rollout of the CIS (Centre for Internet Security) framework and expanded staff training programs, including mandated and opt-in sessions and phishing simulations tailored to risk profiles across the business.

Lowe left Nine in 2023 for a new opportunity.

She then became general manager of cyber security at Ventia before joining The Lottery Corporation, and has also previously held roles at Qantas and Nine.

Remit at The Lottery Corporation

Lowe's role at The Lottery Corporation includes leading a three-year cyber security uplift program.

The company's chief information officer, Loren Somerville, said the position is responsible for maintaining the organisation's cyber security defences, delivering its security strategy and secure solutions, maintaining cyber security and technology risk, governance and external certification, and delivering the uplift program.

On joining the company, Lowe said, "I'm excited to evolve the cyber strategy and enhance the cyber and risk delivery function"

Sources

  1. 1.
    iTnewsitnews.com.au · published 15 August 2024 · checked 26 October 2026 · tier B
  2. 2.
    CSO Onlinecsoonline.com · published 22 May 2022 · checked 26 October 2026 · tier B
  3. 3.
    iTnewsitnews.com.au · published 4 July 2023 · checked 26 October 2026 · tier B

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.