Cyber Security Business Partner (Biso)

Avant Mutual; Sydney; On-site; AUD 150,000 - 210,000; Full time

Job summary

Avant Mutual in Sydney, NSW, Australia, is seeking an experienced Cyber Security Business Partner to bridge business needs with Information Security. This hybrid, permanent full-time role focuses on embedding secure-by-design practices across projects, operations and change initiatives.

You will translate complex security requirements into practical outcomes, influence decisions, and strengthen risk management across the organisation.

Qualifications

• Proven experience in information security with risk governance and stakeholder engagement.
• Translate security concepts into clear business language.
• Experience conducting Threat Risk Assessments and working with security frameworks.
• Strong understanding of APRA CPS 230/234, NIST and ISO 27001.

Responsibilities

• Act as the key security partner to senior business leaders, providing strategic advice.
• Embed security into projects and operations through secure-by-design principles.
• Conduct TRAs and SSAs to identify and mitigate risks early.
• Drive consistent security control implementation, remediation and audits.
• Support cyber simulations, penetration testing activities and incident readiness.
• Partner with risk teams on risk profiles and compliance reporting.
• Support cyber security awareness initiatives and promote security culture.
• Oversee vendor security governance and compliance obligations.
• Contribute to executive and board-level security posture reporting.

Skills

Risk management

Governance

Stakeholder engagement

Threat Risk Assessments

Security frameworks

APRA CPS 230

APRA CPS 234

NIST

ISO 27001

CISSP

CISM

CRISC

Security Architect

Tools

Security assessments

Job description

Cyber Security Business Partner (BISO) Avant mutua Sydney, NSW, AU

• Hybrid Sydney CBD
• Permanent full time

At Avant, we are looking for an experienced and commercially minded security leader to become the trusted link between our business and Information Security teams. As Security Business Partner, you'll work closely with senior stakeholders to embed security into the way we operate, ensuring business objectives are achieved while security risks are effectively managed.

Acting as a strategic advisor, you'll translate complex security requirements into practical business outcomes, influence decision-making, and champion the adoption of security controls across projects, operations, and change initiatives. This is a highly visible role where you'll help drive a secure-by-design culture and strengthen risk management across the organisation.

Key accountabilities:

• Act as the key security partner to Business CIOs, COOs and senior leaders, providing strategic advice and guidance.
• Embed security into projects, operations and business decision-making through secure-by-design principles.
• Conduct Threat Risk Assessments (TRAs) and Security Solution Assessments (SSAs) to identify and mitigate risks early.
• Drive consistent implementation of security controls, vulnerability remediation and audit actions across the business.
• Support cyber simulations, penetration testing activities and incident readiness.
• Partner with risk teams to develop risk profiles, mitigation strategies and compliance reporting.
• Support cybersecurity awareness initiatives and promote a strong security culture.
• Oversee vendor security compliance and governance obligations.
• Contribute to executive and Board-level reporting on security posture and key risks.

Skills and experience required:

• Proven experience in Information Security, with strong expertise in risk management, governance and stakeholder engagement.
• Demonstrated ability to translate technical security concepts into clear business language.
• Experience conducting Threat Risk Assessments and working with recognised security frameworks.
• Strong understanding of APRA CPS 230, CPS 234, NIST, ISO 27001 and related regulatory frameworks.
• Relevant qualifications such as CISSP, CISM, CRISC or equivalent.
• A collaborative, pragmatic approach with the ability to balance business outcomes and security risk.
• Previous experience as a Security Architect would be highly regarded.

Why Avant?

Join an organisation where security is viewed as a strategic business enabler, not just a technical function. You'll work closely with executive leaders, influence critical business decisions, and help strengthen the security posture of a purpose‑led organisation that supports healthcare professionals across Australia.

Equal Opportunity Employer

Avant supports doctors so they can serve Australia's diverse communities. Having diversity in our workforce brings valuable perspectives and strengthens our ability to support healthcare professionals.
We therefore welcome applications from people of all backgrounds, including Aboriginal and Torres Strait Islander peoples, people from culturally diverse communities, LGBTQIA+ individuals, people with disabilities, and those with caring responsibilities.

Our inclusive workplace is somewhere everyone can succeed.