At a Glance
- Tasks: Lead cyber security risk assessments and influence business decisions with clear communication.
- Company: Join a leading cybersecurity firm focused on innovation and collaboration.
- Benefits: Attractive salary, flexible work options, and opportunities for professional growth.
- Other info: Dynamic role with opportunities to shape security strategies and engage with industry leaders.
- Why this job: Make a real impact in cybersecurity while mentoring the next generation of risk assessors.
- Qualifications: 15+ years in Cyber Security with strong GRC experience and technical risk assessment skills.
The predicted salary is between 72000 - 88000 $ per year.
Role Summary Senior cyber security risk professional responsible for leading risk assessments, providing strategic risk guidance, and influencing business decisions through clear communication of cyber security risks and opportunities.
- Key Accountabilities
- Lead cyber security risk assessments across projects, products, and technology initiatives.
- Collaborate with project teams to identify, assess, and address security gaps and control deficiencies.
- Communicate complex technical risks in clear business terms, including to executive stakeholders through risk decision-making processes.
- Make informed risk-based decisions and manage stakeholder expectations effectively.
- Lead the uplift of team processes, documentation, and engagement models.
- Additional Responsibilities
- Collaborate with business stakeholders, engineers, delivery teams, product vendors, partners, and cyber assurance teams to understand and communicate cyber risk.
- Define and maintain reusable assets including standardised findings, templates, and process improvements.
- Contribute to the creation and governance of security strategy, standards, frameworks, and policies.
- Identify and communicate security risks in a timely manner while incorporating insights from privacy, legal, engineering, and operational stakeholders.
- Develop strategic relationships across industry and technology vendors to anticipate emerging threats and opportunities.
- Mentor and coach risk assessors and secondees through guidance, feedback, and knowledge sharing.
- Manage complex initiatives while simplifying outcomes to support effective delivery and execution.
Qualifications and Experience
- Minimum 15 years of experience within Cyber Security.
- At least 8 years of experience in a Governance, Risk and Compliance (GRC) or Risk Management function.
- Practical experience conducting technical risk assessments.
- Knowledge of industry frameworks and standards including ISO 27001, PCI-DSS, NIST, and enterprise security frameworks.
- Strong stakeholder engagement and communication skills with the ability to translate technical risks into business insights.
- Experience working within large and complex enterprise environments.
- Highly Desirable
- Previous experience in a non-cyber risk or GRC role.
- Industry certifications such as CRISC, CISSP, CISM, or SABSA.
- Experience working within Agile and Dev Ops environments.
LeadRisk Assessor_Cybersecurity in Melbourne employer: XPT Software
XPT Software is an exceptional employer, offering a dynamic work culture that fosters innovation and collaboration in the field of AI governance. Located at the heart of Defence operations, employees benefit from unique opportunities to engage with industry leaders and contribute to meaningful projects that enhance national security. With a strong focus on professional development, XPT Software supports employee growth through continuous learning and mentorship, making it an ideal place for those looking to make a significant impact in their careers.
