Cyber Risk & Tech Governance Lead Maternity Cover

Steadfast Group; Sydney; On-site; AUD 110,000 - 170,000; Full time

Job summary

Steadfast Group is seeking a Technology and Cyber Risk Specialist to strengthen governance, risk reporting and third-party risk management during a maternity leave cover. The role collaborates with Technology, Risk, Legal, Procurement and the business to identify, assess, manage and report risks in line with regulatory obligations.

You will lead risk assessments, oversee vendor security outcomes, and prepare governance dashboards, while contributing to policy enhancements and risk guidance for

Qualifications

• Experience in Technology Risk, Cyber Risk, Information Security Governance, GRC, Audit, or Operational Risk.
• Strong understanding of risk management frameworks, controls testing, risk assessment methodologies, and risk reporting.
• Knowledge of cyber security principles, third-party risk management, vendor assurance processes, and regulatory compliance requirements.
• Experience responding to security questionnaires, due diligence requests, or assurance reviews from clients, partners, regulators, or external stakeholders is highly regarded.
• Excellent stakeholder management skills with the ability to engage both technical and non-technical audiences.
• Relevant qualifications in Information Technology, Cyber Security, Risk, Audit, or a related field; industry certifications are advantageous.

Responsibilities

• Conduct technology and cyber risk assessments and support the ongoing management of risk registers and treatment plans.
• Lead third-party and vendor risk reviews, ensuring appropriate security and compliance controls are in place.
• Oversee, review, and challenge third-party vendor security assessment outcomes, ensuring identified risks are appropriately understood, managed, and escalated. Vendor assessments themselves will be conducted by a dedicated team resource.
• Coordinate and complete security questionnaires, due diligence requests, and assurance responses when Steadfast is being assessed by clients, insurers, brokers, or other third parties, ensuring responses accurately reflect security controls and governance practices.
• Prepare risk reporting, dashboards, and insights for governance committees and senior stakeholders.
• Review and enhance technology risk and cyber security policies, standards, and processes.
• Provide risk and governance guidance to technology projects and business initiatives.

Skills

Technology risk

Cyber risk

Information security governance

GRC

Regulatory compliance

Stakeholder management

Education

Info Tech

Cyber security

Risk

Audit

Job description

Steadfast Group is seeking a Technology and Cyber Risk Specialist to strengthen governance, risk reporting and third-party risk management during a maternity leave cover. The role collaborates with Technology, Risk, Legal, Procurement and the business to identify, assess, manage and report risks in line with regulatory obligations.

You will lead risk assessments, oversee vendor security outcomes, and prepare governance dashboards, while contributing to policy enhancements and risk guidance for