Security Risk Assurance

Recruit CRM; City of Melbourne; On-site; AUD 170,000 - 230,000; Full time

Job summary

Security Risk Assurance in Melbourne, Australia seeks a Senior Cyber Security Risk Assurance Lead who is hands-on and multi-disciplined, assessing complex technical issues and performing cyber security risk assessments across initiatives in a fast-paced environment.

The role requires translating technical risks into business context for executive stakeholders and delivering clear findings from diverse sources such as secure coding, architecture, and testing.

Qualifications

• 10+ years in cyber security roles (architecture, testing, assurance, cyber risk).
• Ability to understand security findings and concepts from Secure Coding, Secure Architecture, Secure Testing, Partner Security, etc.
• Proven experience performing hands-on risk assessments with a technical security context.
• Proven experience translating technical risks into business context for stakeholders.

Skills

10+ yrs exp

Security findings understanding

Hands-on risk assessments

Translate risks to business

Exec stakeholder comms

Experience in complex environments

Executive communication

Job description

Security Risk Assurance

Role

The Senior Cyber Security Risk Assurance Lead is hands-on and multi-disciplined, assessing complex technical issues and performing cyber security risk assessments across a wide range of initiatives in a fast-paced, complex environment.

Required Skills & Experience

• 10+ years’ experience in a cyber security related role (architecture, testing, assurance, cyber risk).
• Ability to understand security findings and concepts from a variety of sources such as Secure Coding, Secure Architecture, Secure Testing, Partner Security etc.
• Proven experience in performing hands-on risk assessments with a technical security context.
• Proven experience in roles which require the translation of technical risks in business context and the communication of outcomes to business stakeholders.
• Experience working in complex environments.
• Excellent communication and presentation skills to executive stakeholders.

Desirable

• Strong understanding of common industry standards such as ISO, NIST, and E8.
• CISSP, CISA, CRISC certifications