An exciting opportunity is available for an experienced Cyber Security Governance Lead to play a key role in establishing and maturing a Cybersecurity Operating Model.
The position is focused on strengthening cyber security governance, risk management, compliance and assurance, with a particular emphasis on ISO 27001, enterprise security risk management and security governance frameworks.
You’ll work closely with technical teams and business stakeholders, taking ownership of key governance activities and helping establish practical, sustainable cyber security processes.
The role is focused on establishing and maintaining the frameworks, policies and processes required to support effective cyber security governance across a complex technology environment.
Working closely with technical teams and business stakeholders, you’ll play an important role in strengthening security risk management, compliance and assurance activities, while supporting the broader development and maturity of the Cybersecurity Operating Model.
Key responsibilities include:
- Support the establishment and ongoing operation of a Cybersecurity Operating Model.
- Implement, maintain and continuously improve an ISO 27001 Information Security Management System (ISMS).
- Develop and maintain security governance frameworks, policies, standards and procedures.
- Lead enterprise cyber security risk assessments and ongoing risk management activities.
- Manage third-party and supplier security risk assessments.
- Coordinate internal and external security audits, compliance activities and assurance programs.
- Identify security control gaps and support remediation and continuous improvement initiatives.
- Work closely with technical teams and business stakeholders to translate security requirements into practical business outcomes.
- Support alignment with recognised security standards and relevant Australian regulatory requirements.
About You To be successful in this role, you will bring:
- At least seven years of experience in cyber security or information security.
- A minimum of four years of experience across governance, risk, compliance or security assurance.
- Demonstrated experience implementing and operating an ISO 27001 Information Security Management System.
- Robust experience supporting security audits, compliance reviews and assurance activities.
- A solid background in enterprise cyber security risk management and third‑party risk.
- Experience developing and maintaining security policies, standards and governance processes.
- Strong working knowledge of ISO 27001, ISO 31000, NIST and Essential Eight.
- Excellent stakeholder engagement and communication skills, with the ability to engage with both technical and non‑technical stakeholders.
📌 Security Governance Lead (Adelaide)
🏢 Sharp & Carter
📍 Adelaide
Reply to this offer
Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.