Data & AI Security Lead

Downer; City of Melbourne; On-site; AUD 150,000 - 190,000; Full time

Job summary

Downer is seeking an experienced cyber security professional to lead data and AI security standards and governance within its Security Engineering & Platforms team. You will influence security strategy, partner with Privacy, Legal, and Risk teams, and guide the safe adoption of data platforms and AI-enabled solutions across diverse environments.

You will define controls, assess risks, and drive security maturity through reporting and stakeholder engagement, ensuring secure, practical outcomes

Qualifications

• Bachelor's degree in cyber security, computer science, information technology, MIS or equivalent.
• 7+ years' commercial experience in IT or cyber security.
• Demonstrated working knowledge of NIST standards, ISO/IEC 27001, ASD Essential Eight and cyber security controls.
• Professional certifications such as CISSP, CISM, CISA, CRISC, CompTIA Security+ or equivalent are desirable.
• ITIL Foundation or equivalent service management experience is desirable.
• Data governance, privacy, AI governance or data security-related training is desirable.
• Experience supporting data security, information protection, privacy-aligned risk management or AI governance activities.
• Experience translating data and AI security risks into business impact and practical controls.
• Extensive experience preparing guidance, reporting and governance materials for emerging technology risks.

Responsibilities

• Define and maintain data and AI security standards, controls, policies and governance frameworks.
• Provide security-by-design guidance for data platforms, analytics and AI-enabled solutions.
• Assess data and AI security risks including data handling, access controls, model risks and third-party dependencies.
• Partner with Privacy, Legal, Risk, Architecture, Application Security and Technology teams to embed security controls.
• Support monitoring, incident response and remediation planning for data and AI security events.
• Develop reporting and insights on data and AI security posture and remediation activities.
• Drive awareness and education across the organisation on responsible AI and data security.
• Translate technical risks into clear business recommendations and actionable outcomes.
• Champion the development and implementation of AI solutions within the cyber security team.

Skills

Data protection

Governance

Risk management

Stakeholder influence

Security strategy

Education

Bachelor's degree in cyber security

Tools

NIST standards

ISO/IEC 27001

ASD Essential Eight

Job description

This is an exciting opportunity for an experienced cyber security professional who combines strong technical expertise with strategic thinking and stakeholder influence. You will lead the development of data and AI security standards, provide expert guidance on emerging technology risks, and help ensure security is embedded into Downer's rapidly evolving digital landscape.

Reporting to the Cyber Platform Manager (SecOps), this role sits within the Security Engineering & Platforms team and works closely with Cyber Security, Group Technology, Risk, Privacy, Legal and business stakeholders to deliver secure, practical and risk-aligned outcomes.

This role offers the opportunity to influence security strategy and drive meaningful outcomes across some of Downer's most critical operational environments.

The position can be based in Sydney (North Ryde), Melbourne (Collins Street) or Brisbane (Milton).

About the Role

In this role you will:

• Define and maintain data and AI security standards, controls, policies and governance frameworks aligned to Downer's cyber strategy and risk appetite.
• Provide security-by-design guidance to support the safe adoption of data platforms, analytics capabilities and AI-enabled solutions.
• Assess data and AI security risks, including data handling, access controls, model risks, automation risks and third-party dependencies.
• Partner with Privacy, Legal, Risk, Architecture, Application Security and Technology teams to embed security controls into business and technology initiatives.
• Support monitoring, incident response activities and remediation planning for data and AI security events.
• Develop reporting and insights on data and AI security posture, emerging risks, control maturity and remediation activities.
• Drive awareness and education across the organisation to promote responsible and secure use of data and artificial intelligence.
• Translate complex technical risks into clear business recommendations and actionable outcomes.
• Champion the development and implementation of AI solutions within the wider cyber security team.

This is a highly visible role where you will contribute to strategic decision-making while helping shape the future of data and AI security across a large and diverse enterprise environment.

Our Ideal Candidate

You are a collaborative and forward-thinking cyber security professional with strong expertise in data protection, governance and risk management. You are comfortable navigating emerging technologies, influencing stakeholders, and balancing security requirements with business objectives.

You bring a pragmatic approach to problem-solving and enjoy working across technical and non-technical teams to deliver practical, effective security outcomes.

What You Will Bring

• Bachelor's degree in cyber security, computer science, information technology, management information systems or equivalent practical experience.
• 7+ years' commercial experience in information technology or cyber security, with relevant experience in the role domain.
• Demonstrated working knowledge of NIST standards, ISO/IEC 27001, ASD Essential Eight and cyber security controls.
• Relevant professional certifications such as CISSP, CISM, CISA, CRISC, CompTIA Security+ or equivalent are desirable.
• ITIL Foundation or equivalent service management experience is desirable.
• Data governance, privacy, AI governance or data security-related training is desirable.
• Experience supporting data security, information protection, privacy-aligned risk management or AI governance activities.
• Strong experience assessing security risks for data platforms, analytics, automation or AI-enabled solutions.
• Experience working with Privacy, Legal, Risk, Architecture, Data and Technology stakeholders.
• Experience translating data and AI security risks into business impact and practical controls.
• Extensive experience preparing guidance, reporting and governance materials for emerging technology risks.

Why Downer?

As a trusted name in infrastructure, transport, facilities management, and construction, Downer is committed to delivering projects that create a lasting, positive legacy.

We're committed to building a team that reflects the diverse communities we serve, and we welcome people of all ages, genders, sexual orientations, cultures, abilities, and lived experiences. We especially encourage applications from those whose voices have traditionally been underrepresented in our industry, including women, Aboriginal and Torres Strait Islander Peoples, Māori and Pasifika Peoples, veterans, people with disability, and neurodivergent individuals.

As a WORK180 Endorsed Employer, we support flexibility that works for your life, inclusive leadership that values your voice, and equitable access to opportunity so you can do your best work and bring your whole self to it. c