cyber security risk specialist

HR Partners; City of Brisbane; On-site; AUD 110,000 - 170,000; Full time

Job summary

HR Partners is seeking an experienced Cyber Security Risk Specialist in Australia to provide independent second-line oversight and guidance across the enterprise. You will shape the cyber risk profile, test controls, and report findings to senior management, ensuring regulatory alignment.

Ideal candidates hold tertiary qualifications in risk or computing, with demonstrated experience in financial services or APRA-regulated environments, strong frameworks knowledge (ISO 27001, NIST, CPS 234), and

Qualifications

• Relevant tertiary qualifications in risk, commerce, computer science, or related discipline.
• Experience in cyber security risk management, ideally in financial services or APRA-regulated environments.
• Strong knowledge of ISO 27001, NIST, CPS 234.
• Experience executing assurance activities, risk assessments, and control testing; able to challenge senior stakeholders.
• Excellent communication, exposure to cloud security, AI models, or IAM desirable.

Responsibilities

• Provide independent second-line oversight of cyber security risk management.
• Develop, implement, and measure security policies and guidelines to comply with regulatory requirements.
• Design, coordinate, and execute assurance activities and control testing.
• Deliver reporting and insights to senior management on risk profiles and threats.
• Review root cause analyses and ensure remediation actions are implemented.

Skills

Cyber risk mgmt

ISO 27001

NIST

CPS 234

Assurance activities

Risk assessments

Control testing

Stakeholder engagement

Cloud security

IAM (Identity & Access)

Education

Tertiary qualifications in risk/computing

Job description

Are you an experienced Cyber Security Risk Specialist looking to make a high-value impact within a dynamic environment? We are seeking a skilled professional to provide independent second-line oversight, challenge, and expert guidance to ensure enterprise cyber security risks are effectively identified, assessed, and managed. In this role, you will help shape the organisation's cyber risk profile, evaluate control effectiveness, and support alignment with key regulatory standards.

Are you an experienced Cyber Security Risk Specialist looking to make a high-value impact within a dynamic environment? We are seeking a skilled professional to provide independent second-line oversight, challenge, and expert guidance to ensure enterprise cyber security risks are effectively identified, assessed, and managed. In this role, you will help shape the organisation's cyber risk profile, evaluate control effectiveness, and support alignment with key regulatory standards.

1) What You Will Do:

• Provide independent second-line oversight, review, and challenge of cyber security risk management activities across the organisation.

• Develop, implement, and measure cyber security policies, procedures, and guidelines to comply with regulatory requirements and industry best practices.

• Design, coordinate, and execute assurance activities and independent control testing across the cyber security domain.

• Deliver expert advice, regular reporting, and actionable insights to senior management regarding cyber risk profiles, control effectiveness, and emerging threats.

• Review root cause analysis for security incidents and ensure sustainable remediation actions are effectively implemented.

2) What You Need to Apply for This Role:

• Relevant tertiary qualifications in risk, commerce, computer science, or a related discipline.

• Demonstrated experience in cyber security or information security risk management, ideally within financial services or APRA-regulated environments.

• Strong working knowledge of recognised cyber security frameworks and standards, such as ISO 27001, NIST, and CPS 234.

• Practical experience executing assurance activities, risk assessments, and control testing, alongside the ability to constructively challenge senior stakeholders.

• Excellent communication skills, with additional exposure to cloud security, AI models, or identity and access management being highly desirable.

You must be an Australia based candidate with unlimited working rights to be considered.

At Randstad, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.