Manager, Cyber Assurance, Risk, Regulatory & Compliance

Qantas Airways; Sydney; On-site; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Travel benefits

Parental leave

Discounts

Wellbeing program

Job summary

Qantas Airways is seeking a Manager, Cyber Assurance, Risk, Regulatory & Compliance in Sydney (Mascot) to lead cyber risk governance across the Group. You will drive third-party and supplier risk programs, oversee assurance activities and support the development of policies and standards within Group Cyber Security.

You will collaborate with Procurement, Technology and Risk teams, overseeing audits and regulatory requirements while guiding a high-performing team in a dynamic, agile environment.

Qualifications

• 5+ years delivering third-party and supply chain risk management.
• Experience with cyber risk assessments and security governance.
• Knowledge of ISO 27001, PCI, GDPR and other regulatory requirements.
• Strong communication and stakeholder management skills.
• Ability to lead large teams and facilitate discussions.
• Experience with audits and assurance activities.

Responsibilities

• Evaluate effectiveness of cyber measures across key risk domains, including systems, suppliers, data and people.
• Manage cyber supply chain risk and assurance activities, including supplier due diligence and risk escalation.
• Oversee cyber risk across third-party, fourth-party and complex supplier arrangements with key stakeholders.
• Develop and maintain Group Cyber Policy and related standards.
• Operate in a Line 2 capacity and support 3 Lines Model collaboration.
• Contribute to building a high-performing cyber risk team.
• Plan and manage cyber security risk-related assessments and audits of IT systems.
• Support SOCI and PCI compliance tasks.

Skills

Cyber risk management

Supply chain risk

Stakeholder engagement

Governance

Regulatory compliance

Policy development

Audit readiness

Education

Information Security degree

Certifications e.g., CISA/CISSP

Tools

GRC tools

Job description

• Fantastic opportunity to progress your Qantas Career within Cyber Risk,Regulatory & Compliance
• Manage cyber risk across third-party, fourth-party and complex supplier arrangements, working closely with Procurement, Technology, Risk and business stakeholders
• Full-time Permanent Role based in Sydney,Mascot

The Manager, Cyber Assurance, Risk, Regulatory & Compliance is responsible for supporting the development and sustainable delivery of the Group’s Cyber Risk Management and control assurance strategy across the Qantas Airways, Qantas Loyalty and Jetstar.

This role reports to the Senior Manager, Cyber Assurance, Risk, Regulatory & Compliance and will form part of the Group Cyber Assurance, Risk, Regulatory & Compliance team within the Group Cyber Security team under the Group Risk and Services Division.

As a Manager in Group Cyber Security, this role will deliver strategic cyber risk management and governance activities across the Qantas Group. This includes managing the pipeline of cyber risk and assurance activities, overseeing mitigation and remediation actions based on priority, identifying and escalating issues to senior management and contributing to cyber risk frameworks, policies and standards.

Your role has a particular focus on managing cyber supply chain risk, delivering cyber assurance activities, including PCI assurance, and supporting the development and maintenance of the Group Cyber Policy and related standards. You will also contribute to broader cyber risk management, regulatory compliance and governance priorities across the Qantas Group.

Key Responsibilities include:

• Evaluating the effectiveness of cyber measures across key risk domains, including systems, suppliers, data and people
• Manage cyber supply chain risk and assurance activities, including overseeing supplier due diligence, risk assessments, ongoing monitoring, remediation oversight and risk escalation.
• Manage cyber risk across third-party, fourth-party and complex supplier arrangements, working closely with Procurement, Technology, Risk and business stakeholders.
• Contribute to the development, review, maintenance and implementation of the Group Cyber Policy and related standards.
• Operate in a Line 2 capacity and support review, challenge and advice as part of the 3 Lines Model with internal and external stakeholders.
• Contribute to the development and performance of a high-performing team, strengthening cyber risk management and assurance practices across the Qantas Group
• Plan and manage the delivery of cyber security risk-related internal and external assessments and/or audits of information technology systems and processes, interpret results, and develop and communication recommendations to management
• Support and conduct assigned tasks to support compliance requirements. For example SOCI and PCI

You’ll have:

• 5+ years or more of experience in the following: Delivering Third-Party and Supply Chain Risk Management, Cyber risk assessments, Security Governance, Security Process and Security Policy and Standards and Process design
• Responsibility forexecuting Security Strategy Risk and Compliance
• Degree desirable (e.g., Information Security, Information Protection, Computer Information Systems, Computer Science, Computer Engineering, Information Systems Management, Business/Commerce, Law)
• Industry certification desirable (e.g., CISA, CISSP, etc.)
• Understanding of compliance issues (ISO 27001, SSAE 16, NIST, PCI, GDPR etc) and Regulatory requirements
• Strong communication and presentation skills along withStrong Stakeholder Engagement Skills
• The ability to lead large groups and be a primary facilitator, strong written skills
• Comfortable working in complex, agile environment and matching outcomes to expectations
• Ability to work easily with diverse and dynamic teams
• Strong influence and negotiation skills needed to obtain commitments to remediate risks and vulnerabilities from leadership of other teams and business units
• Good level of understanding of and experience in external and internal audits
• Experience with GRC/Policy/Compliance Management tools desirable

Why Qantas?

You’ll join a team where creativity and passion are encouraged. Our people come together to allow us to dream big and deliver successfully. There are many different opportunities across our team, which means you’ll be able to grow both personally and professionally at Qantas. Your development is a priority for us – so that you can maintain the high standards our customers have come to expect and can continue to develop over time. You’ll be supported from day 1 with on the job training and coaching as well as our formal training opportunities. While you may start in this role, we’ve got a great track record of supporting our people to take their career in so many different directions, the destinations are endless.

The Qantas employee benefits program offers amazing benefits that extend well beyond travel:

• We love to travel: Enjoy heavily discounted air travel within Australia and across the globe, both for you and your family and friends, as well as exclusive deals on accommodation and holidays.
• We have flexible leave options: Make use of leave and flexible working opportunities including 18 weeks paid parental leave and the option to purchase additional paid leave for eligible employees.
• We’ll give you access to thousands of rewards: Through our partnerships we can offer you discounts across shopping, food and wine, insurance, health and wellbeing, leisure and entertainment. You can also take advantage of our salary packaging program including motor vehicles, eligible portable electronic devices and professional memberships.
• We’ll support your wellbeing: Whether it’s learning to better support your own and others’ mental health, our interactive wellbeing app or your very own tailored nutrition plan.

Applications close:13th October 2026