Cyber GRC Manager in Wollongong

Make an impact at the University of Wollongong (UOW) — a purpose‐driven institution ranked in the top 1% of universities globally.

About the Role

The GRC Manager - Cyber will play a critical role in strengthening UOW's cyber security capability by supporting the operationalisation and organisation‐wide adoption of the University's Information Security Management System (ISMS).

Working within the Cyber Security Uplift Program, you will help embed governance, risk and compliance practices across the University, ensuring that cyber security controls, risk management processes and compliance obligations are effectively integrated into business operations and technology services.

Key responsibilities

• Support the implementation and ongoing adoption of the University's Information Security Management System (ISMS) across business and technology teams.
• Facilitate cyber risk management activities, including risk assessments, risk treatment planning and the continued rollout of cyber risk processes within Protecht.
• Lead third‐party and critical asset security risk assessments to identify and mitigate cyber security risks across the University environment.
• Deliver assurance, compliance and governance activities that strengthen UOW's cyber resilience and support informed decision‐making.
• About the Team

This role sits within Information Management & Technology Services (IMTS), UOW's central provider of information management and technology services.

Reporting to the Cyber Security Program Director, you will work closely with the Associate Director Security (CISO), cyber security specialists, project teams, business leaders and external partners to deliver strategic cyber security outcomes.

The team is focused on uplifting cyber maturity and ensuring the University can safely support teaching, research and operational excellence.

• What You'll Bring
• Demonstrated experience in cyber security governance, risk and compliance within a large or complex organisation.
• Experience supporting the implementation or operation of Information Security Management Systems (ISMS) and recognised security frameworks such as ISO 27001 or NIST.
• Strong capability in conducting cyber risk assessments, third‐party security assessments and supporting risk treatment activities.
• Excellent stakeholder engagement, communication and influencing skills, with the ability to work effectively across business and technical teams.
• Strong analytical, reporting and documentation skills, with a focus on continuous improvement and operational outcomes.
• Why Join UOW
• Competitive salary package including 17% superannuation
• 35‐hour full‐time work week supporting greater balance and flexibility
• Flexible working arrangements and family‐friendly policies
• Generous leave entitlements including additional concession days over the Christmas–New Year period
• Purchased leave options to provide greater flexibility throughout the year
• Ongoing professional development and clear career progression opportunities
• Fixed Term, Full time appointment (12 months)
• Level 8-9 salary $123,283 - $152,959 plus 17% superannuation, salary will be commensurate with candidate experience and capability
• Location: Wollongong Campus | Hybrid working arrangement (minimum 2 days per week on campus)
• Valid Australian work rights required. Visa sponsorship is not available.
• Equity, Diversity & Inclusion

The University of Wollongong is committed to fostering an inclusive and equitable workplace where diversity is valued, respected and celebrated.

We strive to create a workplace that reflects the communities we serve, removes barriers to participation, and provides equitable opportunities for staff to reach their full potential.

We strongly encourage applications from Aboriginal and Torres Strait Islander peoples, people of all gender identities and sexual orientations, people from culturally and linguistically diverse backgrounds, people with disability, and those with caring or family responsibilities.

As required by federal legislation, prospective employees are required to declare whether they have been investigated for an allegation of Gender based Violence or determined to have engaged in conduct that constitutes Gender based Violence, during their previous employment, or otherwise in a legal process.

Any such declaration will be included in the University's employment screening processes and will be treated with the strictest confidence and in compliance with all privacy legislation.

For further information about this position, please contact Craig Gveric Program Director – Cyber Security*******@uow. edu. au