About Diversa

Diversa Trustees Limited (DTL) is a specialist Trustee company focusing on superannuation funds in Australia, including retail master trusts, corporate funds, platform (wraps), Pooled Superannuation Trusts, and insurance only funds.

Diversa has been operating for many years providing trustee services to approximately 24 APRA regulated superannuation funds.

About the Role

As a newly introduced role within the business, the Information Security Manager will play a key role in implementing and managing Diversa's Information Security environment, including cyber security. The role will lead third-party oversight and assurance initiatives, while partnering with stakeholders across the business to ensure compliance with regulatory and prudential standards including CPS 234, CPS 230 and SPS 220, embed sound information security practices, and drive continuous improvement.

Key Responsibilities

- Lead the Line 1 management, implementation and oversight of Diversa's Information Security environment, including cyber security, internally and across outsourced service providers
- Maintain the Information Security Policy Framework including standards, processes and procedures
- Lead security control testing, risk assessments and information asset governance across the business, and assist with maintaining and monitoring the information security risk register
- Manage internal audits and liaise with internal and external auditors
- Manage third-party security risk assessments, supervision and reporting
- Provide security guidance for outsourced service providers such as fund administrators and promoters
- Manage information security incident management, disaster recovery and business continuity planning




- Develop and deliver security awareness and training to all employees
- Oversee the external attack surface management solution and phishing simulations and similar tests to improve security behaviours
- Provide GRC thought leadership and education across the business
- Assist in the preparation of information security risk reporting to the Board and senior management

Knowledge and Experience

- 7+ years of experience in an Information Security role, preferably GRC related
- Degree or diploma in IT, Cybersecurity, Risk Management or a related field
- Demonstrated experience in security control testing, risk assessments and audit support
- Experience in Financial Services or superannuation highly regarded

Skills and Competency

- Strong understanding of GRC principles, information security frameworks and regulatory obligations
- Excellent written and verbal communication skills with the ability to engage stakeholders at all levels
- Ability to translate technical security concepts for non-technical audiences
- High level of attention to detail and organisational skills
- Collaborative team player who can also work autonomously

Advantages

- At Diversa, we value collaboration, teamwork, and diversity, and understand that through flexibility, our employees can achieve their best work life balance to support their professional goals while meeting their personal needs.
- Diversa offers an attractive remuneration package commensurate with skills and experience.
- You will have the opportunity to work in a professional, supportive, and friendly work environment in our CBD office as well as from home (4 days Office/1 day WFH)

If this sounds like the perfect place for you to take the next step in your career, please apply!

📌 Information Security Manager (Melbourne)
🏢 Diversa Trustees
📍 Melbourne