Manager, Cyber Assurance, Risk, Regulatory & Compliance

Qantas Group; Sydney; On-site; AUD 140,000 - 210,000; Full time

Job summary

Qantas is seeking a Manager, Cyber Assurance, Risk, Regulatory & Compliance to lead cyber risk management and assurance activities across the Qantas Group, including Qantas Airways, Qantas Loyalty and Jetstar. This role focuses on governance, policy development, supplier risk, and regulatory compliance within a complex, fast-moving environment.

You will oversee third-party risk, drive PCI and other assurance activities, and collaborate with Procurement, Technology and Risk teams to remediate

Qualifications

• 5+ years of experience in Third-Party and Supply Chain Risk Management, cyber risk assessments, governance, policy and standards.
• Experience executing Security Strategy, Risk and Compliance.
• Strong understanding of ISO 27001, SSAE 16, NIST, PCI, GDPR and regulatory requirements.
• Excellent communication and stakeholder engagement skills with ability to lead large groups.
• Experience with audits (internal and external) and risk remediation.
• Desirable: experience with GRC/Policy/Compliance management tools.

Responsibilities

• Evaluate effectiveness of cyber measures across risk domains including systems, suppliers and people.
• Manage cyber supply chain risk, due diligence, risk assessments, monitoring and remediation oversight.
• Oversee cyber risk across third-party, fourth-party and complex supplier arrangements with key stakeholders.
• Develop, review and implement the Group Cyber Policy and related standards.
• Operate in a Line 2 capacity, providing review and challenge as part of the 3 Lines Model.
• Contribute to building a high-performing cyber risk team across the Qantas Group.
• Plan and manage cyber risk-related assessments and audits of information systems and processes, interpret results and communicate recommendations.
• Support compliance tasks for SOCI, PCI and other requirements.

Skills

Third-Party Risk

Supply Chain Risk

Cyber risk assessments

Security Governance

Security Policy & Standards

Stakeholder Engagement

Audits

Tools

GRC Tools

Job description

Manager, Cyber Assurance, Risk, Regulatory & Compliance

• Full-time
• Business Function: Cyber Security
• Parent Business Function: Digital, IT & Analytics
• Time Type: Full time
• Worker Sub-Type: Permanent
• • Fantastic opportunity to progress your Qantas Career within Cyber Risk,Regulatory & Compliance
  • Manage cyber risk across third-party, fourth-party and complex supplier arrangements, working closely with Procurement, Technology, Risk and business stakeholders
  • Full-time Permanent Role based in Sydney,Mascot

The Manager, Cyber Assurance, Risk, Regulatory & Compliance is responsible for supporting the development and sustainable delivery of the Group’s Cyber Risk Management and control assurance strategy across the Qantas Airways, Qantas Loyalty and Jetstar.

This role reports to the Senior Manager, Cyber Assurance, Risk, Regulatory & Compliance and will form part of the Group Cyber Assurance, Risk, Regulatory & Compliance team within the Group Cyber Security team under the Group Risk and Services Division.

As a Manager in Group Cyber Security, this role will deliver strategic cyber risk management and governance activities across the Qantas Group. This includes managing the pipeline of cyber risk and assurance activities, overseeing mitigation and remediation actions based on priority, identifying and escalating issues to senior management and contributing to cyber risk frameworks, policies and standards.

Your role has a particular focus on managing cyber supply chain risk, delivering cyber assurance activities, including PCI assurance, and supporting the development and maintenance of the Group Cyber Policy and related standards. You will also contribute to broader cyber risk management, regulatory compliance and governance priorities across the Qantas Group.

Key Responsibilities include:

• Evaluating the effectiveness of cyber measures across key risk domains, including systems, suppliers, data and people
• Manage cyber supply chain risk and assurance activities, including overseeing supplier due diligence, risk assessments, ongoing monitoring, remediation oversight and risk escalation.
• Manage cyber risk across third-party, fourth-party and complex supplier arrangements, working closely with Procurement, Technology, Risk and business stakeholders.
• Contribute to the development, review, maintenance and implementation of the Group Cyber Policy and related standards.
• Operate in a Line 2 capacity and support review, challenge and advice as part of the 3 Lines Model with internal and external stakeholders.
• Contribute to the development and performance of a high-performing team, strengthening cyber risk management and assurance practices across the Qantas Group
• Plan and manage the delivery of cyber security risk-related internal and external assessments and/or audits of information technology systems and processes, interpret results, and develop and communication recommendations to management
• Support and conduct assigned tasks to support compliance requirements. For example SOCI and PCI

You’ll have:

• 5+ years or more of experience in the following: Delivering Third-Party and Supply Chain Risk Management, Cyber risk assessments, Security Governance, Security Process and Security Policy and Standards and Process design
• Responsibility forexecuting Security Strategy Risk and Compliance
• Understanding of compliance issues (ISO 27001, SSAE 16, NIST, PCI, GDPR etc) and Regulatory requirements
• Strong communication and presentation skills along withStrong Stakeholder Engagement Skills
• The ability to lead large groups and be a primary facilitator, strong written skills
• Comfortable working in complex, agile environment and matching outcomes to expectations
• Ability to work easily with diverse and dynamic teams
• Strong influence and negotiation skills needed to obtain commitments to remediate risks and vulnerabilities from leadership of other teams and business units
• Good level of understanding of and experience in external and internal audits
• Experience with GRC/Policy/Compliance Management tools desirable

Why Qantas?

You’ll join a team where creativity and passion are encouraged. Our people come together to allow us to dream big and deliver successfully. There are many different opportunities across our team, which means you’ll be able to grow both personally and professionally at Qantas. Your development is a priority for us – so that you can maintain the high standards our customers have come to expect and can continue to develop over time. You’ll be supported from day 1 with on the job training and coaching as well as our formal training opportunities. While you may start in this role, we’ve got a great track record of supporting our people to take their career in so many different directions, the destinations are endless.

The Qantas employee benefits program offers amazing benefits that extend well beyond travel:

• We love to travel: Enjoy heavily discounted air travel within Australia and across the globe, both for you and your family and friends, as well as exclusive deals on accommodation and holidays.
• We have flexible leave options: Make use of leave and flexible working opportunities including 18 weeks paid parental leave and the option to purchase additional paid leave for eligible employees.
• We’ll give you access to thousands of rewards: Through our partnerships we can offer you discounts across shopping, food and wine, insurance, health and wellbeing, leisure and entertainment. You can also take advantage of our salary packaging program including motor vehicles, eligible portable electronic devices and professional memberships.
• We’ll support your wellbeing: Whether it’s learning to better support your own and others’ mental health, our interactive wellbeing app or your very own tailored nutrition plan.