Security Assurance Lead - Risk, TPRA & Cloud

Dyflex Solutions; Sydney; On-site; AUD 130,000 - 170,000; Full time

Benefits offered by this job

Salary packaging

Novated leasing

Parental leave

Udemy access

Professional development

Discounts on products

Job summary

Harvey Norman is seeking a Security Consultant to embed security-by-design principles across projects, assess proposed solutions and manage risk through remediation or formal acceptance. The role collaborates with security leaders, project teams, architects and vendors to strengthen information security assurance.

You will lead third-party risk assessments, review designs and coordinate testing, contributing to mature assurance frameworks and industry best practices.

Qualifications

• 5+ years in cyber security, information security assurance or risk management.
• Experience reviewing solution architectures, data flows and integrations.
• Experience conducting security and third-party risk assessments.
• Exposure to vulnerability assessments, security reviews and testing.
• Knowledge of ISO 27001, NIST CSF, OWASP, IAM, Zero Trust.

Responsibilities

• Conduct Information Security Assurance reviews across initiatives, embedding security-by-design.
• Develop and communicate security requirements, criteria and standards across projects.
• Identify security risks with stakeholders and recommend pragmatic controls.
• Perform Third Party Risk Assessments reviewing questionnaires, audits and evidence.
• Review architectures, data flows and implementations for security alignment.
• Coordinate security assessments including vulnerability tests and pen testing.
• Remediate or formally accept identified vulnerabilities and risks.
• Perform Information Security Risk Assessments per Harvey Norman framework.
• Document, track and escalate risks through governance processes.

Skills

Security risk assessment

Information security

Threat modelling

Stakeholder engagement

Penetration testing

Education

Bachelor's in IT/Cybersecurity

CISSP/CISM/CRISC/CCSP

Job description

Harvey Norman is seeking a Security Consultant to embed security-by-design principles across projects, assess proposed solutions and manage risk through remediation or formal acceptance. The role collaborates with security leaders, project teams, architects and vendors to strengthen information security assurance.

You will lead third-party risk assessments, review designs and coordinate testing, contributing to mature assurance frameworks and industry best practices.