Cybersecurity Strategy & Governance Lead

Capgemini; Brisbane; Hybrid; AUD 190,000 - 230,000; Full time

Benefits offered by this job

Hybrid working

Learning & development opportunities

Total Reward package

Celebrate recognition portal

Job summary

Capgemini Australia is seeking an experienced Cybersecurity Lead to drive governance, risk, and compliance across the organization. You will establish policy aligned with Group and local regulations, lead ISO27001 programs, manage incidents, and coordinate audits to ensure contract and regulatory compliance.

The role offers hybrid working, strong learning opportunities, and exposure to clients globally, including participation in threat assessments and security program enhancements.

Qualifications

• CISM/CGRC certification or ISO27001/ISO42001 Lead Auditor credentials.
• Proven experience implementing security frameworks across governance, risk and compliance.

Responsibilities

• Establish and implement governance and policy aligned with local regs and Group policies.
• Monitor cybersecurity risks, conduct risk assessments and annual threat reviews.
• Develop cybersecurity awareness, training, and communications programs.
• Oversee ISMS policy compliance, security assessments and audits with customers.
• Track policy exceptions and remediation plans to ensure timely closure.
• Lead ISO 27001 certification programs and related initiatives.
• Coordinate customer audits and remediation actions with stakeholders.
• Support engagement teams in assessing cybersecurity risks with third parties.
• Manage incidents, lead remediation, and represent the organization in crisis management.
• Monitor KRIs/KPIs to measure and improve security performance across the unit.

Skills

CISM/ CGRC Lead Auditor

ISO27001 Lead Auditor

Job description

Capgemini Australia is seeking an experienced Cybersecurity Lead to drive governance, risk, and compliance across the organization. You will establish policy aligned with Group and local regulations, lead ISO27001 programs, manage incidents, and coordinate audits to ensure contract and regulatory compliance.

The role offers hybrid working, strong learning opportunities, and exposure to clients globally, including participation in threat assessments and security program enhancements.