APAC Cybersecurity Compliance Leader

Upcover; Melbourne; Hybrid; AUD 180,000 - 230,000; Full time

Benefits offered by this job

Flexible work arrangements

Salary packaging and novated leases

Paid professional membership fees

Life/Health insurance discounts

Employee stock purchase plans

Personal career development plans

Job summary

KBR seeks an experienced APAC Cybersecurity Compliance Manager to lead regional cybersecurity governance, risk management, and compliance initiatives across APAC operations. You will collaborate with the global CISO team and business leaders to embed security into operations and drive a culture of security.

The role focuses on developing regional strategies, enabling secure business operations, and ensuring alignment with global security standards and regulatory obligations across the APAC

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related discipline.
• Ability to obtain an Australian Government Security Clearance.
• Significant experience in information security management, cybersecurity compliance, risk assessment, and incident response.
• Strong understanding of cybersecurity governance frameworks, controls, and regulatory requirements.
• Experience engaging with senior stakeholders and influencing business outcomes.
• Excellent analytical, problem-solving, communication, and interpersonal skills.
• Demonstrated ability to lead initiatives and promote a strong security culture.

Responsibilities

• Develop and execute regional cybersecurity strategies aligned with corporate policies, regional regulations, and business objectives.
• Establish and maintain security policies, standards, and procedures.
• Partner with business leaders to integrate cybersecurity considerations into decision-making and operational processes.
• Provide regional leadership on information security governance and compliance initiatives.
• Conduct regular security risk assessments across APAC operations.
• Identify vulnerabilities, threats, and emerging risks.
• Develop and implement mitigation strategies and security controls.
• Monitor compliance with applicable laws, regulations, customer requirements, and contractual obligations.
• Support regional cybersecurity incident response activities.
• Conduct post-incident reviews and lessons-learned exercises.
• Drive continuous improvement initiatives to strengthen security resilience and reduce future risk.
• Develop and deliver security awareness and education programs for employees, contractors, and third-party partners.
• Foster a culture of security awareness across the organisation.
• Communicate emerging threats, risks, and best practices to stakeholders.
• Assess cybersecurity risks associated with vendors, suppliers, and business partners.
• Perform security due diligence activities.
• Collaborate with Procurement and Legal teams to ensure appropriate security obligations are embedded within contracts and agreements.
• Develop security performance metrics and reporting frameworks.
• Provide regular updates to the CISO organisation and business leadership on security posture, compliance activities, risks, and incidents.
• Identify trends and opportunities for improvement through security reporting and analysis.
• Coordinate and support internal and external security audits.
• Manage remediation activities arising from audit findings.
• Ensure ongoing compliance with regulatory, contractual, and organisational security requirements.

Skills

Leadership

Governance

Stakeholder engagement

Communication

Analytical thinking

Problem solving

Education

Bachelor's degree in Computer Science / Information Systems / Cybersecurity

Tools

ISO 27001

NIST CSF

Australian Essential Eight

ISM

DISP

Job description

KBR seeks an experienced APAC Cybersecurity Compliance Manager to lead regional cybersecurity governance, risk management, and compliance initiatives across APAC operations. You will collaborate with the global CISO team and business leaders to embed security into operations and drive a culture of security.

The role focuses on developing regional strategies, enabling secure business operations, and ensuring alignment with global security standards and regulatory obligations across the APAC