Security Business Partner | Strategic Risk & Enablement

Avant Mutual; Sydney; Hybrid; AUD 150,000 - 210,000; Full time

Job summary

Avant Mutual in Sydney, NSW, Australia, is seeking an experienced Cyber Security Business Partner to bridge business needs with Information Security. This hybrid, permanent full-time role focuses on embedding secure-by-design practices across projects, operations and change initiatives.

You will translate complex security requirements into practical outcomes, influence decisions, and strengthen risk management across the organisation.

Qualifications

• Proven experience in information security with risk governance and stakeholder engagement.
• Translate security concepts into clear business language.
• Experience conducting Threat Risk Assessments and working with security frameworks.
• Strong understanding of APRA CPS 230/234, NIST and ISO 27001.

Responsibilities

• Act as the key security partner to senior business leaders, providing strategic advice.
• Embed security into projects and operations through secure-by-design principles.
• Conduct TRAs and SSAs to identify and mitigate risks early.
• Drive consistent security control implementation, remediation and audits.
• Support cyber simulations, penetration testing activities and incident readiness.
• Partner with risk teams on risk profiles and compliance reporting.
• Support cyber security awareness initiatives and promote security culture.
• Oversee vendor security governance and compliance obligations.
• Contribute to executive and board-level security posture reporting.

Skills

Risk management

Governance

Stakeholder engagement

Threat Risk Assessments

Security frameworks

APRA CPS 230

APRA CPS 234

NIST

ISO 27001

CISSP

CISM

CRISC

Security Architect

Tools

Security assessments

Job description

Avant Mutual in Sydney, NSW, Australia, is seeking an experienced Cyber Security Business Partner to bridge business needs with Information Security. This hybrid, permanent full-time role focuses on embedding secure-by-design practices across projects, operations and change initiatives.

You will translate complex security requirements into practical outcomes, influence decisions, and strengthen risk management across the organisation.