Enterprise Cyber Risk & Governance Leader

BaptistCare; Sydney; Hybrid; AUD 260,000 - 340,000; Full time

Job summary

BaptistCare is seeking a strategic Head of Cyber Risk & Governance to lead and mature enterprise cyber risk governance across a national, highly regulated organisation. You will shape policy frameworks, reporting to senior leadership, and oversee risk oversight across information, digital and transformation initiatives.

You will partner with Executive leaders, Risk, Legal, Privacy and Procurement to elevate cyber risk awareness, embed governance, and drive secure digital transformation while

Qualifications

• Extensive leadership experience in Cyber Risk, Governance, GRC, Technology Risk, or Information Security within a large and complex environment.
• Proven experience designing and implementing enterprise cyber risk management and governance frameworks.
• Strong understanding of regulatory and compliance obligations within highly regulated industries.
• Experience influencing executives, risk committees, and Board stakeholders.
• Demonstrated experience leading third-party risk management and supplier assurance programs.
• Strong knowledge of NIST CSF, ISO 27001, ASD Essential Eight, and contemporary cyber risk practices.
• Experience gained within aged care, health, banking, financial services, or other highly regulated sectors will be highly regarded.
• ,
• Professional certifications such as CISM, CRISC, or equivalent cyber risk/governance certifications are highly desirable.
• Ability to translate complex cyber risks into practical business outcomes and drive organisational risk maturity.

Responsibilities

• Own and lead BaptistCare's enterprise cyber risk management framework, ensuring cyber and technology risks are identified, assessed, treated, monitored, and reported effectively.
• Lead the day-to-day cyber risk governance function, embedding strong risk management practices across the organisation.
• Chair and facilitate the Cyber Risk Committee, driving effective governance, escalation, and oversight of cyber risk matters.
• Partner closely with Executive leaders, the Chief Risk Officer, and business stakeholders to improve cyber risk awareness, accountability, and decision-making.
• Develop, maintain, and continuously improve cyber security policies, standards, and governance frameworks aligned with regulatory requirements and industry best practice.
• Ensure cyber governance frameworks align with relevant legislation, including the Aged Care Act, privacy obligations, and other regulatory requirements.
• Drive a strong cyber risk culture across BaptistCare through education, engagement, and capability-building initiatives.
• Lead enterprise-wide cyber risk assessments, including technology, operational, strategic, and emerging risks.
• Oversee third-party cyber risk management, including supplier assessments, ongoing monitoring, and governance of outsourced technology services.
• Provide strategic oversight of emerging technology risks, including AI-enabled solutions and digital transformation initiatives.
• Deliver high-quality cyber risk reporting, insights, and recommendations to Executive leadership, governance forums, and Board committees.
• Build and lead a high-performing Cyber Risk & Governance team, consisting of specialist cyber governance, third-party risk, and information management professionals.
• Work collaboratively across Information & Digital, Risk, Legal, Privacy, Procurement, and Compliance functions to strengthen enterprise risk management outcomes.
• Support BaptistCare's ongoing transformation journey by ensuring cyber risk considerations are embedded into strategic initiatives and technology investment decisions.

Skills

Leadership

Cyber risk governance

GRC

Technology risk

Regulatory compliance

Executive influencing

Third‑party risk

NIST CSF

ISO 27001

ASD Essential Eight

CISM

CRISC

Job description

BaptistCare is seeking a strategic Head of Cyber Risk & Governance to lead and mature enterprise cyber risk governance across a national, highly regulated organisation. You will shape policy frameworks, reporting to senior leadership, and oversee risk oversight across information, digital and transformation initiatives.

You will partner with Executive leaders, Risk, Legal, Privacy and Procurement to elevate cyber risk awareness, embed governance, and drive secure digital transformation while