Cyber Security Assurance Lead

University of New South Wales; Sydney; Hybrid; AUD 131,000 - 177,000; Full time

Benefits offered by this job

Flexible Working Options

Career development

17% Superannuation contributions

Additional leave over Christmas

Discounts and entitlements

Job summary

University of New South Wales in Kensington, Sydney, is seeking a Cyber Security Assurance Lead for its UNSW IT, Cyber Directorate. This full-time continuing role focuses on delivering assurance services within a robust risk management framework and reporting against control testing outcomes.

The role requires deep knowledge of cyber security controls, GRC practices, and standards such as ISO 27001 and NIST.

Qualifications

• Bachelor's degree in cyber security or related field required.
• Certifications such as CISA/CISSP/CRISC are highly desirable.
• Solid knowledge of ISO 27001, NIST, PCI DSS and related standards.

Responsibilities

• Review cyber security controls across IT systems and test effectiveness.
• Collaborate with stakeholders to develop remediation plans and track progress.
• Develop dashboards and quarterly metrics for control effectiveness.
• Report monthly to the CISO and Deputy CISO on progress and findings.
• Support audits and stay updated on regulatory obligations.

Skills

Penetration testing

Vulnerability management

GRC fundamentals

ISO 27001 knowledge

CISA CISSP CRISC

Education

Bachelor's degree in cyber security

CISA

CISSP

CRISC

ISO 27001 Lead Auditor

Job description

University of New South Wales – Kensington NSW

• Full-time continuing role within UNSW IT, Cyber Directorate – Cyber Security Assurance Lead
• Starting Salary $153,933 plus generous superannuation and leave loading
• Kensington, Sydney location, 2-3 days in the office, Hybrid working

About UNSW

UNSW isn’t like other places you’ve worked. Yes, we’re a large organisation with a diverse and talented community; a community doing extraordinary things. Together, we are driven to be thoughtful, practical, and purposeful in all we do. Taking this combined approach is what makes our work matter. It’s the reason we’re one of the top 20 universities in the world (QS top 20) and a member of Australia’s prestigious Group of Eight. If you want a career where you can thrive, be challenged and do meaningful work, you’re in the right place.The Cyber Security Assurance Lead - leads the operational delivery and reporting of the Cyber Security Assurance Services within a fit-for-purpose and adaptive Cyber Security Risk Management framework. Responsible for the controls assurance testing, metrics reporting, and the provision of cyber security subject matter expertise. The Cyber Security Assurance Lead reports to the Cyber Security Controls Assurance Manager and has no direct reports.

Accountabilities

• Conduct regular review of cyber security controls across IT systems, applications, and networks and perform testing to validate the design and operating effectiveness of controls, identify control gaps, vulnerabilities, and risks, and provide actionable insights and recommendations for remediation.
• Collaborate with stakeholders to develop remediation plans, track progress toward remediation, and work with business owners, control owners and operators to resolve and close findings/issues.Update the cyber risk register with risks from assurance reviews.Prepare detailed audit reports, including findings, risk impacts, and recommendations for senior management and stakeholders, and communicate and report on control testing outcomes and findings.
• Develop and maintain dashboards and metrics to monitor the implementation and effectiveness of security controls, and implement, operationally manage and continually improve the quarterly metrics program.
• Report monthly to the CISO and Deputy CISO on the progress of cyber security assurance.
• Demonstrate leadership in managing and improving UNSW’s assurance capabilities, including improvements to control assurance methodologies, testing procedures, and reporting processes, (incl. Automation).
• Support the independent audit of cyber security controls on behalf of the University, including statutory audits completed by the Audit Office of NSW.Continually stay up to date and aware of legal, regulatory compliance and contractual obligations that are relevant to the University’s management of cyber security risk.

Who you are

• 5+ years of IT security experience, ideally with global consulting firms, large technology companies, government agencies, or defence consultancies.
• Thorough understanding of penetration testing, vulnerability management, application security testing, and source code review.
• Experience in a first-line assurance role, assessing controls for design and operating effectiveness; experience in security controls testing is advantageous but not mandatory.Strong analytical skills with the ability to interpret data and provide actionable insights for management and problem-solving skills to address challenges effectively.
• Strong fundamentals in Cyber Security Governance, Risk, and Compliance (GRC) principles and practices.
• Comprehensive knowledge of industry standards and frameworks, such as ISO 27001, NIST 800 53, CSA, Essential 8, PCI DSS, COBIT 5, and MITRE ATT&CK.
• Bachelor’s degree in cyber security, Information Technology, or a related field.
• Relevant industry certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Auditor (highly desirable).
• An understanding of and commitment to UNSW’s aims, objectives and values in action, together with relevant policies and guidelines.
• Knowledge of health & safety (psychosocial and physical) responsibilities and commitment to attending relevant health and safety training.

Benefits and Culture

• Flexible Working Options (work from home, flexible hours etc)
• Career development opportunities
• 17% Superannuation contributions and additional leave loading payments
• Additional 3 days of leave over Christmas period
• Discounts and entitlements (retail, education, fitness)

Sponsorship is not available for this role; valid Australian working rights are required on application. Pre-Employment Checks- as part of our recruitment process candidates may be required to undergo pre-employment screening, which may include reference checks, qualification verification, right-to-work verification, and criminal history screening where relevant to the role.

UNSW is committed to equity diversity and inclusion. Applications from women, people of culturally and linguistically diverse backgrounds, those living with disabilities, members of the LGBTIQ+ community; and people of Aboriginal and Torres Strait Islander descent, are encouraged. UNSW provides workplace adjustments for people with disability, and access to flexible work options for eligible staff.The University reserves the right not to proceed with any appointment.

Applications close:Thursday 22nd of October at 11.30pm