Cyber Security Assurance Lead

University of New South Wales; Sydney; Hybrid; AUD 139,000 - 169,000; Full time

Benefits offered by this job

Flexible Working Options

17% Superannuation contributions and 3

3 extra leave days at Christmas

Discounts and entitlements

Job summary

UNSW IT, Cyber Directorate, is seeking a Cyber Security Assurance Lead in Sydney. The role leads operational delivery of Cyber Security Assurance Services, tests controls, reports metrics, and provides SME guidance. Hybrid work with 2–3 days in the Kensington/Sydney office, salary starting at $153,933 plus superannuation.

You will maintain dashboards, report to the CISO, and drive improvements to assurance methodologies and testing procedures while aligning with UNSW’s policies and values.

Qualifications

• 5+ years IT security experience in large organisations or consulting
• Experience in first-line assurance assessing design and operating effectiveness of controls
• Strong analytical ability to interpret data and provide actionable insights
• Knowledge of industry standards: ISO 27001, NIST 800-53, CSA, Essential 8, PCI DSS, COBIT 5, MITRE ATT&CK
• Certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Auditor desirable

Responsibilities

• Conduct regular review of cyber security controls across IT systems, applications and networks; perform testing to validate control design and operating effectiveness
• Collaborate with stakeholders to develop remediation plans and track progress toward remediation
• Update the cyber risk register with risks from assurance reviews
• Prepare audit reports with findings, risk impacts and recommendations for senior management
• Develop dashboards and metrics to monitor security controls and improve quarterly metrics program
• Report monthly to the CISO and Deputy CISO on progress of cyber security assurance
• Support independent audits of cyber security controls and ensure alignment with legal and contractual obligations

Skills

IT security

Penetration testing

Vulnerability management

GRC

Stakeholder comms

Reporting & analytics

ISO 27001/NIST 800-53

Auditing

Education

Bachelor’s degree in Cyber Security or Information Technology

Tools

MITRE ATT&CK

COBIT 5

PCI DSS

ISO 27001

Job description

Job no: 543260
Work type: Full Time
Location: Sydney, NSW
Categories: Information Technology, Cyber

• Full-time continuing role within UNSW IT, Cyber Directorate – Cyber Security Assurance Lead
• Starting Salary $153,933 plus generous superannuation and leave loading
• Kensington, Sydney location, 2-3 days in the office, Hybrid working

About UNSW:

UNSW isn’t like other places you’ve worked. Yes, we’re a large organisation with a diverse and talented community; a community doing extraordinary things. Together, we are driven to be thoughtful, practical, and purposeful in all we do. Taking this combined approach is what makes our work matter. It’s the reason we’re one of the top 20 universities in the world (QS top 20) and a member of Australia’s prestigious Group of Eight. If you want a career where you can thrive, be challenged and do meaningful work, you’re in the right place.

The Cyber Security Assurance Lead - leads the operational delivery and reporting of the Cyber Security Assurance Services within a fit-for-purpose and adaptive Cyber Security Risk Management framework. Responsible for the controls assurance testing, metrics reporting, and the provision of cyber security subject matter expertise. The Cyber Security Assurance Lead reports to the Cyber Security Controls Assurance Manager and has no direct reports.

Accountabilities:

• Conduct regular review of cyber security controls across IT systems, applications, and networks and perform testing to validate the design and operating effectiveness of controls, identify control gaps, vulnerabilities, and risks, and provide actionable insights and recommendations for remediation.
• Collaborate with stakeholders to develop remediation plans, track progress toward remediation, and work with business owners, control owners and operators to resolve and close findings/issues.
• Update the cyber risk register with risks from assurance reviews.
• Prepare detailed audit reports, including findings, risk impacts, and recommendations for senior management and stakeholders, and communicate and report on control testing outcomes and findings.
• Develop and maintain dashboards and metrics to monitor the implementation and effectiveness of security controls, and implement, operationally manage and continually improve the quarterly metrics program.
• Report monthly to the CISO and Deputy CISO on the progress of cyber security assurance.
• Demonstrate leadership in managing and improving UNSW’s assurance capabilities, including improvements to control assurance methodologies, testing procedures, and reporting processes, (incl. Automation).
• Support the independent audit of cyber security controls on behalf of the University, including statutory audits completed by the Audit Office of NSW.
• Continually stay up to date and aware of legal, regulatory compliance and contractual obligations that are relevant to the University’s management of cyber security risk.
• Undertake other duties appropriately and in line with this position as requested by the Cyber Security Controls Assurance Manager and the Head of Cyber Security Governance & Assurance.
• Align with and actively demonstrate the Code of Conduct and Values.
• Cooperate with all health and safety policies and procedures of the university and take all reasonable care to ensure that your actions or omissions do not impact the psychosocial or physical health and safety of yourself or others.
• Ensure hazards and risks of psychosocial and physical are identified and controlled for tasks, projects, and activities that pose a health and safety risk within your area of responsibility.

Who you are:

• *5+ years of IT security experience, ideally with global consulting firms, large technology companies, government agencies, or defence consultancies.
• *Thorough understanding of penetration testing, vulnerability management, application security testing, and source code review.
• *Experience in a first-line assurance role, assessing controls for design and operating effectiveness; experience in security controls testing is advantageous but not mandatory.
• *Strong analytical skills with the ability to interpret data and provide actionable insights for management and problem-solving skills to address challenges effectively.
• *Strong fundamentals in Cyber Security Governance, Risk, and Compliance (GRC) principles and practices.
• *Comprehensive knowledge of industry standards and frameworks, such as ISO 27001, NIST 800 53, CSA, Essential 8, PCI DSS, COBIT 5, and MITRE ATT&CK.
• *Bachelor’s degree in Cyber Security, Information Technology, or a related field.
• *Relevant industry certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Auditor (highly desirable).
• *Strong interpersonal, communication, and negotiation skills, with the ability to build effective relationships and influence stakeholders at all organizational levels.
• *Capability to present complex technical information in a concise, clear, and credible manner for diverse audiences.
• *Demonstrated high level of personal motivation, resilience, and ability to work effectively individually or in teams.
• *An understanding of and commitment to UNSW’s aims, objectives and values in action, together with relevant policies and guidelines.
• *Knowledge of health & safety (psychosocial and physical) responsibilities and commitment to attending relevant health and safety training.

Benefits and Culture

• Flexible Working Options (work from home, flexible hours etc)
• 17% Superannuation contributions and additional leave loading payments
• Additional 3 days of leave over Christmas period
• Discounts and entitlements (retail, education, fitness)

Pre-Employment Checks
As part of our recruitment process candidates may be required to undergo pre-employment screening, which may include reference checks, qualification verification, right-to-work verification, and criminal history screening where relevant to the role.

Please note: Sponsorship is not available for this role; valid Australian working rights are required on application .

Applications close :Thursday 22 nd of October at 11.30pm

UNSW is committed to equity diversity and inclusion. Applications from women, people of culturally and linguistically diverse backgrounds, those living with disabilities, members of the LGBTIQ+ community; and people of Aboriginal and Torres Strait Islander descent, are encouraged. UNSW provides workplace adjustments for people with disability, and access to flexible work options for eligible staff.

The University reserves the right not to proceed with any appointment.

Advertised: 12 Oct 2026 AUS Eastern Daylight Time
Applications close: 22 Oct 2026 AUS Eastern Daylight Time