Remote Cybersecurity Manager — Maturity & Governance Lead

Palladium; Brisbane; On-site; AUD 140,000 - 180,000; Full time

Job summary

Palladium, in partnership with GISI Consulting Group, is seeking a Manager, Cybersecurity to strengthen OPCOs’ security posture across multiple environments. The role will advise local business and technology teams, perform maturity assessments, identify gaps, drive remediation, and promote security best practices in alignment with global standards.

Based remotely in Australia, the fixed-term position is up to ten months with potential extension.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent.
• 8+ years of ICT experience in cybersecurity.
• Strong understanding of cybersecurity frameworks and industry best practices (NIST CSF, CIS Controls, ISO 27001).

Responsibilities

• Partner with OPCOs to assess, improve, and monitor cybersecurity maturity and alignment with policies and standards.
• Identify, assess, and monitor local privacy, regulatory and contractual requirements; ensure alignment with local obligations and standards.
• Develop and maintain remediation roadmaps and action plans to address identified security gaps.
• Support OPCOs in implementing security controls, standards, and procedures per security requirements.
• Provide guidance on governance, risk management, vulnerability management, incident response, data protection, IAM, and third-party risk management.
• Develop SOPs, templates, checklists, and guidance documents for consistent adoption of best practices.

Skills

Cybersecurity governance

Risk management

Incident response

Vulnerability management

Identity and access management

Stakeholder management

Education

Bachelor’s degree in Computer Science or Cybersecurity

Tools

NIST CSF

ISO 27001

CIS Controls

Job description

Manager, Cybersecurity, GISI Consulting Group

Manager, Cybersecurity, GISI Consulting Group

About GISI ConsultingGroup and Palladium

GISI ConsultingGroup (GISI CG) is a top 10 global provider of program and project managementand engineering consulting services delivering outcomes and solutions for someof the most complex challenges. Wedeliver services ininfrastructure & mobility, earth& water, and government & societysegments across more than 100countries. With over 5,000 projectsannually and a global team of over 11,000 professionals, our advisory,consulting, design and program management capabilities enable us to create asafer and more sustainable world. Learn more about GISI CG at https://gisiconsulting.com/.

Palladium, a GISI company, works to design, develop and deliverpositive impact on the lives and livelihoods of people around the globe;broaden access to health, water, power, and infrastructure; build enduring,sustainable, and transformative institutions and market systems to addressglobal challenges; and conserve the natural world. We operate in over 90countries and have a workforce of 2,100 talented, motivated, and diverse staffaround the world. This role will be hired through Palladium, an operationalplatform for GISI CG.

This Opportunity

The Manager, Cybersecurity will supportGISI Consulting Group’s (GCG) Operating Companies (OPCOs) in strengtheningtheir cybersecurity posture by advancing their cybersecurity maturity inalignment with GCG global security strategy, policies, and standards. The rolewill act as an advisor to local business and technology teams, conductcybersecurity maturity assessments, identify gaps and risks, drive remediationinitiatives, and support the implementation of security best practices acrossdiverse business environments. The Manager will work closely with the ICTCybersecurity and Compliance workstream teams to ensure consistent applicationof security controls.

This role is a corporate fixed-term position for up to ten months withthe possibility of an extension to one year.

Location

This role will be based remotely in Australia.

To beconsidered for this position, you must have valid work rights in the countrywhere the role is based. Please note that visa sponsorship is not available forthis role.

Reporting Lines

• The Manager will work under the direction of the SVP, IT Operations (based in the US)
• This role will have regular meetings with the Cybersecurity and Compliance workstream teams and key stakeholders from the OPCOs

Primary Roles and Responsibilities

• Partner with assigned OPCOs to assess, improve,and monitor their cybersecurity maturity and alignment with GCG’sInformation Security Policies and standards
  
• Identify, assess, and monitor applicable localprivacy, regulatory and contractual requirements for assigned OPCOs, andensure alignment with both local obligations and GCG’s standards
  
• Develop and maintain remediation roadmaps andaction plans to address identified security gaps
  
• Support OPCOs in implementing security controls,standards, and procedures in accordance with GCG’s cybersecurityrequirements
  
• Provide guidance on cybersecurity governance,risk management, vulnerability management, incident response, dataprotection, identity and access management, and third-party riskmanagement
  
• Develop SOPs, templates, checklists, and guidancedocuments to support consistent adoption of cybersecurity best practices
  
• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent
  
• 8+ years of relevant ICT experience in the field of cybersecurity
  
• Strong understanding of cybersecurity frameworks and industry best practices, including NIST CSF, CIS Controls, ISO 27001, and risk management principles
  
• Demonstrated experience assessing and improving cybersecurity maturity programs
  
• Knowledge of security governance, compliance, vulnerability management, incident response, identity and access management, and data protection
  
• Strong analytical and problem-solving capabilities with the ability to translate technical risks into business impact
  
• Ability to manage multiple initiatives and priorities across different operating companies
  
• Excellent communication, presentation, stakeholder management, and relationship-building skills
  
• Strong project management and organizational skills.
  
• Ability to work independently while collaborating effectively within a global team environment

Desired Criteria

Applications will be accepted on a rolling basis. We encourage you toapply early as the position may close once a suitable candidate is found. Pleasenote that only shortlisted candidates will be contacted.

We welcomeapplications from candidates of all backgrounds, including First Nationspeoples, people of diverse sexual orientations, gender identities andexpressions, and people with disabilities - disclosure will not affect yourapplication, and we will work with you to provide appropriate adjustments.

Please note:While this role does not involve direct work with children, the successfulcandidate will still be required to complete a police check and relevant duediligence checks as part of Palladium’s commitment to being a child-safeorganisation.

Equity, Diversity & Inclusion - Palladiumis committed to embedding equity, diversity, and inclusion into everything wedo. We welcome applications from all sections of society and actively encouragediversity to drive innovation, creativity, successand good practice. We positively welcome and seek to ensure we achievediversity in our workforce; and that all job applicants and employees receiveequal and fair treatment regardless of their background or personalcharacteristics. These include: (but are not limited to) socio-economicbackground, age, race, gender identity and expression, religion, ethnicity,sexual orientation, disability, nationality, veteran, marital or Indigenousstatus.

Should you require any adjustments or accommodations to be made due to a disability or youare a neurodivergent individual or for any other circumstance, please email ourteam at [e-mail] and wewill be in touch to discuss.

Safeguarding - We define Safeguarding as all the actions takenby Palladium to protect our people, communities where we work and our clientsfrom harm, including Sexual Exploitation, Abuse orSexual Harassment; Child Abuse in any form; Trafficking for sexual exploitationof adults or children and any form of Trafficking of children. We have zerotolerance for all forms of child abuse as well as sexual exploitation, abuseand harassment and zero-tolerance for inaction to prevent, protect against,respond to and report harm. We are committed to ensuring that all childrenand adults who come into contact with Palladium aretreated with respect and are free from abuse. All successful candidates will besubject to an enhanced selection process including safeguarding-focusedinterviews and a rigorous due diligence process. Our Code of Conduct and ChildSafeguarding and Protection against Sexual Exploitation, Abuse and HarassmentGuidelines have additional details.