- What Team Leader Compliance Energy Upgrades Hy...

Showing 4556 Team Leader Compliance Energy Upgrades Hybrid jobs in Melbourne

APAC Cyber Security Compliance Manager

Job Description

Title:
APAC Cyber Security Compliance Manager
Shape and strengthen cybersecurity across the APAC region
KBR is seeking an experienced and strategic APAC Cybersecurity Compliance Manager to join our global Chief Information Security Officer (CISO) organisation. In this critical leadership role, you will be responsible for driving and implementing cybersecurity and compliance initiatives across KBR's APAC operations, ensuring the confidentiality, integrity, and availability of information assets while supporting business objectives across the region.
Working closely with the global CISO team, business leaders, and key stakeholders, you will provide security leadership, manage risk, promote compliance, and help build a strong security culture across our APAC operations.
About the Role
As the APAC Cybersecurity Compliance Manager, you will lead the development and execution of regional cybersecurity strategies aligned with KBR's global security framework, regulatory obligations, and industry best practices. You will play a pivotal role in strengthening governance, managing cybersecurity risk, supporting audits and assessments, and ensuring security outcomes are embedded into business operations.
Key Responsibilities
Information Security Strategy & Governance
+ Develop and implement APAC cybersecurity strategies aligned with corporate policies, regional regulations, and business objectives.
+ Establish and maintain security policies, standards, and procedures.
+ Partner with business leaders to integrate cybersecurity considerations into decision‑making and operational processes.
+ Provide regional leadership on information security governance and compliance initiatives.
Risk Management & Compliance
+ Conduct regular security risk assessments across APAC operations.
+ Identify vulnerabilities, threats, and emerging risks.
+ Develop and implement mitigation strategies and security controls.
+ Monitor compliance with applicable laws, regulations, customer requirements, and contractual obligations.
Incident Response & Continuous Improvement
+ Support regional cybersecurity incident response activities.
+ Conduct post‑incident reviews and lessons‑learned exercises.
+ Drive continuous improvement initiatives to strengthen security resilience and reduce future risk.
Security Awareness & Training
+ Develop and deliver security awareness and education programs for employees, contractors, and third‑party partners.
+ Foster a culture of security awareness across the organisation.
+ Communicate emerging threats, risks, and best practices to stakeholders.
Third‑Party Risk Management
+ Assess cybersecurity risks associated with vendors, suppliers, and business partners.
+ Perform security due diligence activities.
+ Collaborate with Procurement and Legal teams to ensure appropriate security obligations are embedded within contracts and agreements.
Reporting, Metrics & Assurance
+ Develop security performance metrics and reporting frameworks.
+ Provide regular updates to the CISO organisation and business leadership on security posture, compliance activities, risks, and incidents.
+ Identify trends and opportunities for improvement through security reporting and analysis.
Security Audits & Assessments
+ Coordinate and support internal and external security audits.
+ Manage remediation activities arising from audit findings.
+ Ensure ongoing compliance with regulatory, contractual, and organisational security requirements.
About You
You are a seasoned cybersecurity professional with robust leadership capabilities and a passion for enabling secure business operations. You bring a strategic mindset, excellent stakeholder engagement skills, and a deep understanding of cybersecurity governance, risk, and compliance.
Essential Requirements
+ Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related discipline.




+ Ability to obtain an Australian Government Security Clearance.
+ Significant experience in information security management, cybersecurity compliance, risk assessment, and incident response.
+ Strong understanding of cybersecurity governance frameworks, controls, and regulatory requirements.
+ Experience engaging with senior stakeholders and influencing business outcomes.
+ Excellent analytical, problem‑solving, communication, and interpersonal skills.
+ Demonstrated ability to lead initiatives and promote a strong security culture.
Technical Knowledge
+ Strong knowledge of information security principles, technologies, and best practices.
+ Experience working with recognised security frameworks and standards, including:
+ ISO 27001
+ NIST Cybersecurity Framework
+ Australian Essential Eight Maturity Model
+ Australian Information Security Manual (ISM)
+ Defence Industry Security Program (DISP)
+ Understanding of emerging cyber threats, attack vectors, and security trends.
Desirable Qualifications
+ CISSP (Certified Information Systems Security Professional)
+ CISM (Certified Information Security Manager)
+ Other relevant cybersecurity certifications
Why Join KBR?
At KBR, you'll have the opportunity to work on complex and meaningful projects while helping protect critical business operations across the APAC region. You'll be part of a global cybersecurity team, influence strategic security outcomes, and contribute to a culture that values innovation, collaboration, and continuous improvement.
Benefits include:
+ Industry leading salaries reviewed annually.
+ Flexible work arrangements (start/finish times, WFH, Flex time)
+ Salary packaging and novated leases
+ Paid professional membership fees
+ Life/Health insurance discounts
+ Employee stock purchase plans
+ Personal career development plans
+ Growth and promotion opportunities

Description
About Leidos Australia
At Leidos Australia, our work goes beyond a job title. We design, build, operate and support the systems, services and capabilities that help protect and advance the Australian way of life.
Backed by a global organisation of more than 40,000 people, our Australian team of around 2,000 has partnered with government, defence and national security customers for more than 30 years. We deliver mission‑critical solutions where reliability, trust and purpose matter.
Leidos is a destination for people who want their work to have purpose, their contribution to be recognised, and their career to grow without needing to fit a single mould. Meaningful work is supported by benefits, flexibility and career pathways that help you grow while balancing life outside work. This includes:
+ Flex Your Way - Tailor work to your life with options including Life Days (up to 12 extra days off per year), part‑time arrangements, job sharing, and compressed hours.
+ Wellbeing That Matters - Free access to Headspace and MeQuilibrium, plus dedicated wellness spaces to support your mental, physical, and emotional wellbeing.
+ Learn Without Limits - Access over 120,000 on‑demand courses, alongside technical, project management, leadership and professional development opportunities.
+ Work That Makes an Impact - Contribute to nationally significant projects that matter, solve complex challenges, and accelerate your career through unique growth opportunities.
+ Build Your Future - Whether you're deepening technical expertise or preparing for leadership, we'll invest in your development every step of the way.
+ And Much More - These are just a few of the ways we invest in our people and help them thrive.

About the Team
You'll join a team where people work with integrity, inclusion, innovation, agility, collaboration and commitment. In practice, that means sharing ownership,



solving complex problems together and staying connected to the customer context, the purpose behind the work and how each role contributes to meaningful outcomes.
We deliver secure, resilient and innovative technology services that enable Defence enterprise and warfighting capabilities across multiple classified domains and networks. We provide world‑class ICT operations and agile digital modernisation using advanced analytics, automation, hybrid cloud, DevSecOps, Infrastructure as Code, cybersecurity and AI to optimise highly complex, mission‑critical environments.

The Opportunity
The ITSM Assurance & Compliance Manager is responsible for establishing, governing and continually improving the assurance, compliance and control framework across IT Service Management and service delivery operations. Providing independent oversight, this role ensures operational services comply with contractual obligations, organisational policies, regulatory requirements, security standards and service management frameworks.
Working closely with service delivery teams, technical towers, programme stakeholders and customers, you will lead assurance activities, compliance monitoring, service continuity governance, performance measure assurance, risk management and continual improvement initiatives. You will play a key role in building a culture of accountability, evidence‑based compliance and operational excellence.
Key responsibilities include:
+ Lead governance, assurance and compliance activities across service operations, including assurance planning, control assessments, compliance monitoring and management reporting.
+ Maintain compliance with contractual, regulatory and organisational obligations, including ITIL, ISO 2000, ISO 27001, ISO 9001 and relevant customer requirements.
+ Oversee operational risk management, including maintenance of risk registers, monitoring treatment plans and escalating material risks and compliance concerns.
+ Govern service continuity and resilience activities, ensuring continuity plans, recovery procedures and testing programs meet business and contractual requirements.
+ Lead the Performance and Knowledge Management teams, driving continual improvement initiatives, governance outcomes and knowledge management practices across the service.

About You
We are looking for someone who brings judgement, curiosity and a collaborative approach to work that matters.
To be successful in this role, you will bring:
+ Demonstrated experience in IT Service Management, Governance, Risk and Compliance roles, including managing assurance programs and compliance reviews.
+ Strong knowledge of ITIL principles, service management processes, operational control frameworks and risk management practices.
+ Experience developing governance artefacts, executive reporting, compliance metrics and assurance outcomes for diverse stakeholder groups.
+ Strong stakeholder engagement, communication and influencing skills, with the ability to drive corrective actions and improvement initiatives across multiple teams.
+ Tertiary qualifications in Information Technology, Business, Risk Management or a related discipline. ITIL v4 Managing Professional or Strategic Leader certification will be highly regarded.
_This role requires the successful applicant to be an Australian citizen and hold, or be eligible to obtain, NV‑1 security clearance._

Further Information
We are committed to building a workforce that reflects the diversity of the stakeholders we work with. We value the unique perspectives, knowledge, and lived experiences of Aboriginal and Torres Strait Islander peoples, and we actively support a culturally safe and inclusive workplace.

There may be times when it is required to work outside normal business hours i.e. evenings and weekends to meet operational and/or stakeholder requirements, and dependant on work deliverables, the role may be required to undertake travel.

Interested? We encourage you to apply, even if you don’t meet every single criterion. We value diverse experiences and perspectives, and your unique skills could be a great fit for our team.

📌 Team Leader, Compliance — Energy Upgrades (Hybrid) (Melbourne)
🏢 Victorian Government
📍 Melbourne