Security Risk Assurance

Tech Aalto Pte Ltd; Melbourne; On-site; AUD 150,000 - 210,000; Full time

Job summary

Tech Aalto Pte Ltd in Melbourne, Victoria seeks a Senior Cyber Security Risk Assurance Lead to drive hands-on risk assessments across initiatives in a fast-paced environment.

You will translate complex security findings into business context, communicate outcomes to executives, and uphold standards such as ISO, NIST and E8 while pursuing CISSP/CISA/CRISC certifications.

The role requires strong stakeholder engagement and the ability to navigate multiple projects with varying risk profiles.

Qualifications

• 10+ years in cyber security roles including architecture, testing, assurance or cyber risk.
• Ability to translate technical risks to business context and communicate outcomes to stakeholders.
• Experience with complex environments and executive-level communication.
• Knowledge of ISO, NIST and E8 standards; CISSP, CISA or CRISC certs preferred.

Responsibilities

• Perform hands-on cyber security risk assessments across initiatives.
• Assess complex technical issues and provide risk mitigations.
• Communicate risk findings to executive stakeholders.
• Stay current with industry standards and security practices.

Skills

Hands-on risk assessments

Executive communication

Security concepts comprehension

Experience in complex environments

Security standards knowledge

Education

CISSP

CISA

CRISC

Job description

The Senior Cyber Security Risk Assurance Lead is hands‑on and multi‑disciplined, assessing complex technical issues and performing cyber security risk assessments across a wide range of initiatives in a fast‑paced, complex environment.

Required Skills & Experience

• 10+ years’ experience in a cyber security related role (architecture, testing, assurance, cyber risk).
• Ability to understand security findings and concepts from a variety of sources such as Secure Coding, Secure Architecture, Secure Testing, Partner Security etc.
• Proven experience in performing hands‑on risk assessments with a technical security context.
• Proven experience in roles which require the translation of technical risks in business context and the communication of outcomes to business stakeholders.
• Experience working in complex environments.
• Excellent communication and presentation skills to executive stakeholders.
• Strong understanding of common industry standards such as ISO, NIST, and E8.
• CISSP, CISA, CRISC certifications

Security Risk Assurance Melbourne, Victoria, AU