Manager, Cyber Assurance, Risk, Regulatory & Compliance in Sydney

Fantastic opportunity to progress your Qantas Career within Cyber Risk, Regulatory & Compliance. Manage cyber risk across third-party, fourth-party and complex supplier arrangements, working closely with Procurement, Technology, Risk and business stakeholders. Full-time Permanent Role based in Sydney, Mascot.

The Manager, Cyber Assurance, Risk, Regulatory & Compliance is responsible for supporting the development and sustainable delivery of the Group’s Cyber Risk Management and control assurance strategy across Qantas Airways, Qantas Loyalty and Jetstar. This role reports to the Senior Manager, Cyber Assurance, Risk, Regulatory & Compliance and will form part of the Group Cyber Assurance, Risk, Regulatory & Compliance team within the Group Cyber Security team under the Group Risk and Services Division.

As a Manager in Group Cyber Security, this role will deliver strategic cyber risk management and governance activities across the Qantas Group. This includes managing the pipeline of cyber risk and assurance activities, overseeing mitigation and remediation actions based on priority, identifying and escalating issues to senior management and contributing to cyber risk frameworks, policies and standards. Your role has a particular focus on managing cyber supply chain risk, delivering cyber assurance activities, including PCI assurance, and supporting the development and maintenance of the Group Cyber Policy and related standards. You will also contribute to broader cyber risk management, regulatory compliance and governance priorities across the Qantas Group.

Key Responsibilities include:

• Evaluating the effectiveness of cyber measures across key risk domains, including systems, suppliers, data and people.
• Manage cyber supply chain risk and assurance activities, including overseeing supplier due diligence, risk assessments, ongoing monitoring, remediation oversight and risk escalation.
• Manage cyber risk across third-party, fourth-party and complex supplier arrangements, working closely with Procurement, Technology, Risk and business stakeholders.
• Contribute to the development, review, maintenance and implementation of the Group Cyber Policy and related standards.
• Operate in a Line 2 capacity and support review, challenge and advice as part of the 3 Lines Model with internal and external stakeholders.
• Contribute to the development and performance of a high-performing team, strengthening cyber risk management and assurance practices across the Qantas Group.
• Plan and manage the delivery of cyber security risk-related internal and external assessments and/or audits of information technology systems and processes, interpret results, and develop and communicate recommendations to management.
• Support and conduct assigned tasks to support compliance requirements, for example SOCI and PCI.

You’ll have:

• 5+ years or more of experience in the following: Delivering Third-Party and Supply Chain Risk Management, Cyber risk assessments, Security Governance, Security Process and Security Policy and Standards and Process design.
• Responsibility for executing Security Strategy Risk and Compliance.
• Understanding of compliance issues (ISO 27001, SSAE 16, NIST, PCI, GDPR etc) and Regulatory requirements.
• Strong communication and presentation skills along with strong Stakeholder Engagement Skills.
• The ability to lead large groups and be a primary facilitator, strong written skills.
• Comfortable working in complex, agile environment and matching outcomes to expectations.
• Ability to work easily with diverse and dynamic teams.
• Strong influence and negotiation skills needed to obtain commitments to remediate risks and vulnerabilities from leadership of other teams and business units.
• Good level of understanding of and experience in external and internal audits.
• Experience with GRC/Policy/Compliance Management tools desirable.

Why Qantas?

You’ll join a team where creativity and passion are encouraged. Our people come together to allow us to dream big and deliver successfully. There are many different opportunities across our team, which means you’ll be able to grow both personally and professionally at Qantas. Your development is a priority for us – so that you can maintain the high standards our customers have come to expect and can continue to develop over time. You’ll be supported from day 1 with on the job training and coaching as well as our formal training opportunities. While you may start in this role, we’ve got a great track record of supporting our people to take their career in so many different directions, the destinations are endless.

The Qantas employee benefits program offers amazing benefits that extend well beyond travel:

• We love to travel: Enjoy heavily discounted air travel within Australia and across the globe, both for you and your family and friends, as well as exclusive deals on accommodation and holidays.
• We have flexible leave options: Make use of leave and flexible working opportunities including 18 weeks paid parental leave and the option to purchase additional paid leave for eligible employees.
• We’ll give you access to thousands of rewards: Through our partnerships we can offer you discounts across shopping, food and wine, insurance, health and wellbeing, leisure and entertainment. You can also take advantage of our salary packaging program including motor vehicles, eligible portable electronic devices and professional memberships.
• We’ll support your wellbeing: Whether it’s learning to better support your own and others’ mental health, our interactive wellbeing app or your very own tailored nutrition plan.