Cyber Security, Risk & Governance Lead

Peoplebank; Western Australia; On-site; AUD 150,000 - 190,000; Full time

Job summary

Mining producer is seeking an experienced Cyber Security, Risk & Governance Lead to drive and mature its cyber security capability across corporate and operational technology environments.

The role focuses on strengthening governance, risk, compliance and assurance practices while aligning security with organisational objectives. You will work with technology teams, business leaders and external partners to establish robust security frameworks and mature cyber resilience.

Qualifications

• Seven+ years in cyber security, risk, governance, architecture or assurance roles.
• Experience developing security frameworks, policies and risk management practices.
• Strong understanding of OT/ICS security principles and enterprise security.
• Proven track record leading audits, compliance programs and assurance activities.

Responsibilities

• Define and maintain the organisation's cyber security strategy, governance framework and risk management approach.
• Oversee cyber risk, compliance activities and security architecture guidance for OT environments.
• Coordinate internal and external audits, control reviews and remediation activities.
• Develop cyber metrics, dashboards and executive reporting; manage vendor security partners.

Tools

ISO 27001

IEC 62443

NIST CSF

Job description

Cyber Security, Risk & Governance Lead

• Permanent opportunity
• Perth-based role with some travel to site
• Lead the cyber security roadmap and governance framework for IT & Operational Technology environments.

About the Opportunity

We are partnering with Mining producer who is seeking an experienced Cyber Security, Risk & Governance Lead to drive and mature its cyber security capability across both corporate and operational technology environments.

This is a strategic leadership role responsible for strengthening cyber governance, risk management, compliance and assurance practices while ensuring security remains aligned to organisational objectives. You will work closely with technology teams, business leaders and external partners to establish robust security frameworks, provide risk-based guidance and support ongoing cyber maturity initiatives.

The Role

As the Cyber Security, Risk & Governance Lead, you will be responsible for defining and maintaining the organisation's cyber security direction, governance framework and risk management approach.

Acting as a trusted advisor to both technical and business stakeholders, you will oversee cyber risk and compliance activities, provide security architecture guidance on technology initiatives, coordinate audits and assurance programs, and ensure cyber security obligations are embedded across projects, vendors and operational processes.

This role offers the opportunity to influence enterprise-wide security outcomes while building a resilient and sustainable cyber security culture.

Key Responsibilities

• Develop and maintain the organisation's cyber security strategy, roadmap and continuous improvement program.
• Provide cyber security architecture, risk and assurance guidance for Operational Technology (OT) environments, industrial control systems, critical infrastructure and technology-enabled business initiatives.

• Lead cyber governance activities, including the development and management of security policies, standards and procedures.
• Maintain cyber risk registers and oversee risk assessment, mitigation and reporting processes.
• Drive alignment with recognised cyber security frameworks and governance requirements.
• Coordinate internal and external audits, control reviews and remediation activities.
• Oversee identity and access management, privileged access controls and information protection initiatives.
• Develop meaningful cyber metrics, dashboards and executive-level reporting.
• Manage relationships with managed security providers and specialist cyber partners.
• Support cyber incident governance, post-incident reviews and continuous improvement activities.
• Promote cyber awareness and accountability across the organisation.
• Contribute to vendor risk assessments, technology onboarding and third-party assurance processes.
• Support initiatives relating to data governance, privacy and responsible use of technology.

Key Experience

• Minimum seven years' experience within cyber security, risk, governance, architecture or assurance-focused roles.
• Demonstrated experience developing security frameworks, policies, standards and risk management practices.
• Understanding of Corporate and Operational Technology security principles such as ISO 27001 and IEC 62443.
• Strong background managing cyber audits, compliance programs and assurance activities.
• Experience translating technical security issues into business-focused risk outcomes.
• Sound understanding of identity management, endpoint security, cloud security, network security and information protection principles.
• Experience working with frameworks such as SMB1001, ISO 27001, NIST CSF or similar governance standards.
• Experience within industrial, manufacturing, resources, operational technology or critical infrastructure environments.
• Ability to engage effectively with executives, operational stakeholders and technical teams.

Desirable Experience

• Industry certifications such as CISSP, CISM, CRISC or equivalent.
• Knowledge of Microsoft security technologies including Defender, Entra, Purview and Sentinel.
• Experience supporting cyber maturity uplift and transformation initiatives.

What's on Offer

• Opportunity to lead and influence the organisation's cyber security strategy and governance capability.
• High-impact role with exposure to executive and senior leadership stakeholders.
• Diverse portfolio covering cyber security, risk, governance, compliance and assurance.
• Supportive and collaborative technology environment.
• Opportunity to shape cyber maturity and strengthen organisational resilience.
• Competitive remuneration package and long-term career growth opportunities.