Demonstrated experience in information security management, ideally within client-facing in GRC roles.
Comprehensive understanding of client-specific security requirements, including:
- Contractual security clauses
- Data residency and sovereignty obligations
- Sector-specific controls
- Third-party risk management
- In-depth knowledge of key industry standards, such as:
- ISO/IEC 27001, ISO/IEC 27002, ISO/IEC 27701
- NIST Cybersecurity Framework (CSF)
- Australian Government Information Security Manual (ISM)
- APRA CPS 234
- Security of Critical Infrastructure (SOCI) Act
- Business Continuity Planning (BCP)
- Familiarity with regulatory and legislative obligations, including:
- Cyber Security Act 2024
- Privacy Act 1988 and Notifiable Data Breaches (NDB) Scheme
- SOCI Act
- Australian Privacy Principles (APPs)
- Experience with government and defence security frameworks, including:
- Protective Security Policy Framework (PSPF)
- Defence Industry Security Program (DISP), including alignment with Essential Eight, ISM, and ISO 27001
What you’ll love about working here
- You will be a part of a diverse collective of free-thinkers, entrepreneurs and industry experts.
You will love the exposure to the scale of transformation, the depth of expertise, and the opportunities for growth.
- We aim to build an setting where employees can enjoy a positive work-life balance. We embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people.
- At the heart of our mission is your career growth. You will have countless learning and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications crafted to support you in exploring a world of opportunities.
- We realise a Total Reward package should be more than just compensation. We offer a range of core and flexible benefits and have a Peer Recognition Portal called ‘Celebrate’.
Veterans and Indigenous candidates are encouraged to apply
Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad .