Career profile
Jamie Rossato
Chief Information Security Officer, Orica
- Current role, per sources checked 8 October 2026
- February 2026
Jamie Rossato is the Chief Information Security Officer of Orica, a role he took up in February 2026.
Career path
Before joining Orica, Rossato spent almost three-and-a-half years as information security director at beverage firm Lion.
He joined the Commonwealth Scientific and Industrial Research Organisation (CSIRO) in August 2024, and the Australian government agency announced his appointment as Chief Information Security Officer on 30 September 2024, making him the organisation's first dedicated CISO in two-and-a-half years.
At CSIRO, Rossato reported to chief information officer Brendan Dalton, who had held the combined CIO and CISO responsibilities since March 2022.
His remit covered CSIRO's cyber security program, including integration with overall protective security, crisis leadership, governance and threat monitoring across the agency's enterprise and research functions.
Rossato left CSIRO in February 2026 to take up the Chief Information Security Officer position at Orica.
Strategy and public commentary
Speaking on the iTnews Podcast in May 2025, Rossato set out his roadmap for CSIRO, built around five pillars: system protection, data safeguarding, identity governance, incident response, and governance and oversight.
He described his approach to stakeholder engagement around informing, educating and influencing stakeholders alongside operational delivery, and said his first six months in the role were spent listening to stakeholders before formulating strategy.
On the limits of compliance-driven security, he said: "Compliance is important, but it shouldn't be the ultimate goal."
He added that treating compliance as an endgame risked missing other threats, and that CSIRO's focus was on a cyber security posture aligned with the agency's risk appetite.
On technology choices, he said he had the most success with vendors who deliver the capability they promise, rather than over-promising.
Public safety guidance
While at CSIRO, Rossato contributed to the agency's published guidance on avoiding scams and deepfakes.
He advised using a pre-agreed safe word to verify callers before sharing information or transferring money, recommending it be set up before suspicion arises rather than afterward.
He also recommended authentication apps such as Microsoft Authenticator over SMS-based codes for multi-factor authentication, noting that app-based tools often use biometric controls as an additional layer of protection.
