Security Governance Lead

Sharp & Carter; Adelaide; On-site; AUD 140,000 - 180,000; Full time

Job summary

Sharp & Carter is seeking a Cyber Security Governance Lead in Adelaide to establish and mature a Cybersecurity Operating Model. The role focuses on governance, risk, compliance and assurance with emphasis on ISO 27001 and enterprise risk management.

You will work with technical and business stakeholders to implement practical security processes and maintain frameworks, policies and standards across a complex tech environment.

Qualifications

• 7+ years of experience in cyber security or information security.
• 至少4 years in governance, risk, compliance or assurance.
• Demonstrated ISO 27001 ISMS implementation and operation.
• Strong experience in audits, compliance reviews and assurance.
• Solid background in enterprise cyber risk management.
• Experience developing security policies and governance processes.

Responsibilities

• Support establishment and operation of a Cybersecurity Operating Model.
• Implement and maintain ISO 27001 ISMS and governance frameworks.
• Lead risk assessments and manage enterprise security risk.
• Coordinate third‑party security risk assessments and audits.
• Translate security requirements into practical business outcomes.
• Ensure alignment with Australian regulatory requirements.

Skills

Cyber security

Information security governance

ISO 27001

ISMS

Security risk management

Audit & compliance

Third‑party risk

Policy & standards development

Stakeholder engagement

NIST & Essential Eight

ISO 31000 knowledge

Job description

Cyber Security Governance Lead

Adelaide | Permanent

An exciting opportunity is available for an experienced Cyber Security Governance Lead to play a key role in establishing and maturing a Cybersecurity Operating Model.

The position is focused on strengthening cyber security governance, risk management, compliance and assurance, with a particular emphasis on ISO 27001, enterprise security risk management and security governance frameworks.

You’ll work closely with technical teams and business stakeholders, taking ownership of key governance activities and helping establish practical, sustainable cyber security processes.

The role is focused on establishing and maintaining the frameworks, policies and processes required to support effective cyber security governance across a complex technology environment.

Working closely with technical teams and business stakeholders, you’ll play an important role in strengthening security risk management, compliance and assurance activities, while supporting the broader development and maturity of the Cybersecurity Operating Model.

Key responsibilities include:

• Support the establishment and ongoing operation of a Cybersecurity Operating Model.
• Implement, maintain and continuously improve an ISO 27001 Information Security Management System (ISMS).
• Develop and maintain security governance frameworks, policies, standards and procedures.
• Lead enterprise cyber security risk assessments and ongoing risk management activities.
• Manage third-party and supplier security risk assessments.
• Coordinate internal and external security audits, compliance activities and assurance programs.
• Identify security control gaps and support remediation and continuous improvement initiatives.
• Work closely with technical teams and business stakeholders to translate security requirements into practical business outcomes.
• Support alignment with recognised security standards and relevant Australian regulatory requirements.

About You To be successful in this role, you will bring:

• At least seven years of experience in cyber security or information security.
• A minimum of four years of experience across governance, risk, compliance or security assurance.
• Demonstrated experience implementing and operating an ISO 27001 Information Security Management System.
• Strong experience supporting security audits, compliance reviews and assurance activities.
• A solid background in enterprise cyber security risk management and third‑party risk.
• Experience developing and maintaining security policies, standards and governance processes.
• Strong working knowledge of ISO 27001, ISO 31000, NIST and Essential Eight.
• Excellent stakeholder engagement and communication skills, with the ability to engage with both technical and non‑technical stakeholders.