Cyber Security Risk Specialist

Talenza; Sydney; On-site; AUD 120,000 - 160,000; Full time

Job summary

Talenza is seeking an experienced Cyber Risk Specialist to join our Risk & Compliance team in Sydney. You will provide independent oversight of cyber security risks across a complex enterprise, reviewing policies, guiding remediation, and testing controls to ensure robust governance.

You will influence technology and security teams, monitor APRA compliance, and identify emerging threats including AI-related risks. Prior experience in financial services is essential for this role.

Qualifications

• Experience in Cyber Security Risk, Information Security Risk, Cyber GRC, Security Assurance or IT Audit.
• Strong understanding of cyber security frameworks and regulatory obligations (APRA CPS 230, 220, 234).
• Experience in financial services sector is essential.
• Experience in risk assessments, control testing, assurance or governance activities.

Responsibilities

• Review and enhance cyber security policies, processes and controls.
• Conduct cyber risk assessments and provide remediation guidance.
• Perform control assurance activities and independent control testing.
• Provide oversight and challenge to technology and security teams on cyber risk matters.
• Monitor compliance with APRA regulatory requirements.
• Assess effectiveness of security controls across cloud, identity, access management and related domains.
• Support cyber risk reporting for executives and governance committees.
• Identify emerging cyber threats, vulnerabilities and AI-related security risks.
• Review incidents and root cause analyses to drive sustainable remediation outcomes.

Skills

Cyber Security Risk

Information Security Risk

Cyber GRC

Security Assurance

IT Audit

Education

CISSP

CISM

CRISC

CISA

Job description

Major financial services organisation is seeking an experienced Cyber Risk Specialist.

Join a growing Risk & Compliance team and provide independent oversight of cyber security risks across a complex enterprise environment.

Key Responsibilities

• Review and enhance cyber security policies, processes and controls.
• Conduct cyber risk assessments and provide guidance on remediation strategies.
• Perform control assurance activities and independent control testing.
• Provide oversight and challenge to technology and security teams on cyber risk matters.
• Monitor compliance with APRA regulatory requirements
• Assess the effectiveness of security controls across cloud, identity, access management and broader cyber security domains.
• Support cyber risk reporting for executives and governance committees.
• Identify emerging cyber threats, vulnerabilities and AI-related security risks.
• Review incidents and root cause analyses to ensure sustainable remediation outcomes.

About You

• Experience in Cyber Security Risk, Information Security Risk, Cyber GRC, Security Assurance or IT Audit.
• Strong understanding of cyber security frameworks and regulatory obligation - APRA experience is highly desireable (CPS 230, 220, 234)
• Experience working within the financial services space is a must have!
• Experience in risk assessments, control testing, assurance or governance activities.
• Ability to influence stakeholders and provide independent challenge.
• Certifications such as CISSP, CISM, CRISC or CISA are highly regarded.