Head of Cyber Risk & Governance

BaptistCare; Sydney; Hybrid; AUD 260,000 - 340,000; Full time

Job summary

BaptistCare is seeking a strategic Head of Cyber Risk & Governance to lead and mature enterprise cyber risk governance across a national, highly regulated organisation. You will shape policy frameworks, reporting to senior leadership, and oversee risk oversight across information, digital and transformation initiatives.

You will partner with Executive leaders, Risk, Legal, Privacy and Procurement to elevate cyber risk awareness, embed governance, and drive secure digital transformation while

Qualifications

• Extensive leadership experience in Cyber Risk, Governance, GRC, Technology Risk, or Information Security within a large and complex environment.
• Proven experience designing and implementing enterprise cyber risk management and governance frameworks.
• Strong understanding of regulatory and compliance obligations within highly regulated industries.
• Experience influencing executives, risk committees, and Board stakeholders.
• Demonstrated experience leading third-party risk management and supplier assurance programs.
• Strong knowledge of NIST CSF, ISO 27001, ASD Essential Eight, and contemporary cyber risk practices.
• Experience gained within aged care, health, banking, financial services, or other highly regulated sectors will be highly regarded.
• ,
• Professional certifications such as CISM, CRISC, or equivalent cyber risk/governance certifications are highly desirable.
• Ability to translate complex cyber risks into practical business outcomes and drive organisational risk maturity.

Responsibilities

• Own and lead BaptistCare's enterprise cyber risk management framework, ensuring cyber and technology risks are identified, assessed, treated, monitored, and reported effectively.
• Lead the day-to-day cyber risk governance function, embedding strong risk management practices across the organisation.
• Chair and facilitate the Cyber Risk Committee, driving effective governance, escalation, and oversight of cyber risk matters.
• Partner closely with Executive leaders, the Chief Risk Officer, and business stakeholders to improve cyber risk awareness, accountability, and decision-making.
• Develop, maintain, and continuously improve cyber security policies, standards, and governance frameworks aligned with regulatory requirements and industry best practice.
• Ensure cyber governance frameworks align with relevant legislation, including the Aged Care Act, privacy obligations, and other regulatory requirements.
• Drive a strong cyber risk culture across BaptistCare through education, engagement, and capability-building initiatives.
• Lead enterprise-wide cyber risk assessments, including technology, operational, strategic, and emerging risks.
• Oversee third-party cyber risk management, including supplier assessments, ongoing monitoring, and governance of outsourced technology services.
• Provide strategic oversight of emerging technology risks, including AI-enabled solutions and digital transformation initiatives.
• Deliver high-quality cyber risk reporting, insights, and recommendations to Executive leadership, governance forums, and Board committees.
• Build and lead a high-performing Cyber Risk & Governance team, consisting of specialist cyber governance, third-party risk, and information management professionals.
• Work collaboratively across Information & Digital, Risk, Legal, Privacy, Procurement, and Compliance functions to strengthen enterprise risk management outcomes.
• Support BaptistCare's ongoing transformation journey by ensuring cyber risk considerations are embedded into strategic initiatives and technology investment decisions.

Skills

Leadership

Cyber risk governance

GRC

Technology risk

Regulatory compliance

Executive influencing

Third‑party risk

NIST CSF

ISO 27001

ASD Essential Eight

CISM

CRISC

Job description

• Lead BaptistCare's enterprise cyber risk and governance function across a national organisation
• Partner with Executive leaders and governance committees to influence strategic cyber risk decisions
• Hybrid leadership opportunity driving cyber resilience, governance maturity, and secure digital transformation

Shape the Future of Cyber Risk for One of Australia’s Largest Purpose-Driven Organisations

At BaptistCare, we believe technology should enable better outcomes for the communities we serve. As we continue our transformation as a newly unified national organisation, we're seeking an experienced Head of Cyber Risk & Governance to lead and mature our enterprise cyber risk capability.

Reporting to the GM Cyber & IT Risk, this is a nationally focused leadership role responsible for establishing and strengthening cyber risk governance, policy frameworks, executive reporting, and enterprise-wide risk oversight across a complex and highly regulated environment.

This is a unique opportunity to influence strategic decision-making at the executive level while helping to protect the systems, services, data, and people that support thousands of Australians every day.

About the Role

As Head of Cyber Risk & Governance, you will provide strategic leadership across cyber risk management, governance, policy development, compliance oversight, and executive reporting.

Partnering closely with senior leaders across Information & Digital, Risk, Legal, Privacy, Procurement and the broader business, you'll ensure cyber and technology risks are effectively identified, managed, and reported while supporting innovation and digital transformation initiatives.

• Own and lead BaptistCare's enterprise cyber risk management framework, ensuring cyber and technology risks are identified, assessed, treated, monitored, and reported effectively.
• Lead the day-to-day cyber risk governance function, embedding strong risk management practices across the organisation.
• Chair and facilitate the Cyber Risk Committee, driving effective governance, escalation, and oversight of cyber risk matters.
• Partner closely with Executive leaders, the Chief Risk Officer, and business stakeholders to improve cyber risk awareness, accountability, and decision-making.
• Develop, maintain, and continuously improve cyber security policies, standards, and governance frameworks aligned with regulatory requirements and industry best practice.
• Ensure cyber governance frameworks align with relevant legislation, including the Aged Care Act, privacy obligations, and other regulatory requirements.
• Drive a strong cyber risk culture across BaptistCare through education, engagement, and capability-building initiatives.
• Lead enterprise-wide cyber risk assessments, including technology, operational, strategic, and emerging risks.
• Oversee third-party cyber risk management, including supplier assessments, ongoing monitoring, and governance of outsourced technology services.
• Provide strategic oversight of emerging technology risks, including AI-enabled solutions and digital transformation initiatives.
• Deliver high-quality cyber risk reporting, insights, and recommendations to Executive leadership, governance forums, and Board committees.
• Build and lead a high-performing Cyber Risk & Governance team, consisting of specialist cyber governance, third-party risk, and information management professionals.
• Work collaboratively across Information & Digital, Risk, Legal, Privacy, Procurement, and Compliance functions to strengthen enterprise risk management outcomes.
• Support BaptistCare's ongoing transformation journey by ensuring cyber risk considerations are embedded into strategic initiatives and technology investment decisions.

About You

• Extensive leadership experience in Cyber Risk, Governance, GRC, Technology Risk, Operational Risk, or Information Security within a large and complex environment.
• Proven experience designing and implementing enterprise cyber risk management and governance frameworks.
• Strong understanding of regulatory and compliance obligations within highly regulated industries.
• Experience influencing executives, risk committees, and Board stakeholders.
• Demonstrated experience leading third-party risk management and supplier assurance programs.
• Strong knowledge of NIST CSF, ISO 27001, ASD Essential Eight, and contemporary cyber risk practices.
• Experience gained within aged care, health, banking, financial services, or other highly regulated sectors will be highly regarded.
• Professional certifications such as CISM, CRISC, or equivalent cyber risk/governance certifications are highly desirable.
• Ability to translate complex cyber risks into practical business outcomes and drive organisational risk maturity.

About Us:

We are proud to be part of the merged care organisation that will be known nationally as BaptistCare. As a for purpose, Christian care organisation, we are committed to providing exceptional support and services across Australia. Together with Baptcare (VIC, TAS, SA) and Baptist Care SA we employ over 12,000 dedicated employees and support over 38,000 customers to help people live well with dignity and purpose. From older Australians and their families to people facing significant disadvantage, our passion and our priority are the customers we serve. We strive to deliver care as it should be - with people right at the centre.

We love what we do and the communities we help. With us you can deliver life transforming care, create a career you’ll love, and join a team who make a difference.

Successful applications will be subject to a variety of background checks including police background check via our online police check system.

BaptistCare - Transforming lives by expressing the love of Christ.