- Lead BaptistCare's enterprise cyber risk and governance function across a national organisation
- Partner with Executive leaders and governance committees to influence strategic cyber risk decisions
- Hybrid leadership opportunity driving cyber resilience, governance maturity, and secure digital transformation

Shape the Future of Cyber Risk for One of Australia’s Largest Purpose-Driven Organisations

At BaptistCare, we believe technology should enable better outcomes for the communities we serve. As we continue our transformation as a newly unified national organisation, we're seeking an experienced Head of Cyber Risk & Governance to lead and mature our enterprise cyber risk capability.

Reporting to the GM Cyber & IT Risk, this is a nationally focused leadership role responsible for establishing and strengthening cyber risk governance, policy frameworks, executive reporting, and enterprise-wide risk oversight across a complex and highly regulated environment.

This is a unique opportunity to influence strategic decision-making at the executive level while helping to protect the systems, services, data, and people that support thousands of Australians every day.

About the Role

As Head of Cyber Risk & Governance, you will provide strategic leadership across cyber risk management, governance, policy development, compliance oversight, and executive reporting.

Partnering closely with senior leaders across Information & Digital, Risk, Legal, Privacy, Procurement and the broader business, you'll ensure cyber and technology risks are effectively identified, managed, and reported while supporting innovation and digital transformation initiatives.

- Own and lead BaptistCare's enterprise cyber risk management framework,



ensuring cyber and technology risks are identified, assessed, treated, monitored, and reported effectively.
- Lead the day-to-day cyber risk governance function, embedding strong risk management practices across the organisation.
- Chair and facilitate the Cyber Risk Committee, driving effective governance, escalation, and oversight of cyber risk matters.
- Partner closely with Executive leaders, the Chief Risk Officer, and business stakeholders to improve cyber risk awareness, accountability, and decision-making.
- Develop, maintain, and continuously improve cyber security policies, standards, and governance frameworks aligned with regulatory requirements and industry best practice.
- Ensure cyber governance frameworks align with relevant legislation, including the Aged Care Act, privacy obligations, and other regulatory requirements.
- Drive a strong cyber risk culture across BaptistCare through education, engagement, and capability-building initiatives.
- Lead enterprise-wide cyber risk assessments, including technology, operational, strategic, and emerging risks.
- Oversee third-party cyber risk management, including supplier assessments, ongoing monitoring, and governance of outsourced technology services.
- Provide strategic oversight of emerging technology risks,



including AI-enabled solutions and digital transformation initiatives.
- Deliver high-quality cyber risk reporting, insights, and recommendations to Executive leadership, governance forums, and Board committees.
- Build and lead a high-performing Cyber Risk & Governance team, consisting of specialist cyber governance, third-party risk, and information management professionals.
- Work collaboratively across Information & Digital, Risk, Legal, Privacy, Procurement, and Compliance functions to strengthen enterprise risk management outcomes.
- Support BaptistCare's ongoing transformation journey by ensuring cyber risk considerations are embedded into strategic initiatives and technology investment decisions.

About You

- Extensive leadership experience in Cyber Risk, Governance, GRC, Technology Risk, Operational Risk, or Information Security within a large and complex environment.
- Proven experience designing and implementing enterprise cyber risk management and governance frameworks.
- Strong understanding of regulatory and compliance obligations within highly regulated industries.
- Experience influencing executives, risk committees, and Board stakeholders.
- Demonstrated experience leading third-party risk management and supplier assurance programs.
- Strong knowledge of NIST CSF, ISO 27001, ASD Essential Eight, and contemporary cyber risk practices.
- Experience gained within aged care, health, banking, financial services, or other highly regulated sectors will be highly regarded.
- Skilled certifications such as CISM, CRISC, or equivalent cyber risk/governance certifications are highly desirable.
- Ability to translate complex cyber risks into practic

📌 Head of Cyber Risk (Sydney)
🏢 Baptistcare
📍 Sydney