Senior Audit & Compliance Leader (Tax & Super)

Australian Taxation Office

Melbourne

On-site

AUD 180,000 - 240,000

Full time

7 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Industry leading salaries

Flexible work arrangements

Salary packaging and novated leases

Paid professional membership fees

Life/Health insurance discounts

Employee stock purchase plans

Personal career development plans

Job summary

KBR is seeking an experienced APAC Cybersecurity Compliance Manager to lead, develop, and execute regional cybersecurity strategies within the global CISO organisation. You will govern information security, manage risk, support audits, and drive compliance across APAC operations to safeguard critical assets.

This leadership role requires strong stakeholder engagement, governance expertise, and the ability to translate security requirements into business outcomes across the region.

Qualifications

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related discipline.
Ability to obtain an Australian Government Security Clearance.
Significant experience in information security management, cybersecurity compliance, risk assessment, and incident response.
Strong understanding of cybersecurity governance frameworks, controls, and regulatory requirements.
Experience engaging with senior stakeholders and influencing business outcomes.
Excellent analytical, problem-solving, communication, and interpersonal skills.
Demonstrated ability to lead initiatives and promote a strong security culture.

Responsibilities

Develop APAC cybersecurity strategies aligned with corporate policies, regional regulations, and business objectives.
Establish and maintain security policies, standards, and procedures.
Provide regional leadership on information security governance and compliance initiatives.
Conduct regular security risk assessments across APAC operations and implement mitigation strategies.
Monitor and ensure compliance with regulatory, contractual, and organizational security requirements.
Coordinate security audits and remediation activities arising from findings.
Develop and deliver security awareness and training programs for employees and partners.

Skills

Leadership

Stakeholder engagement

Governance & compliance

Analytical thinking

Communication

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity

Tools

ISO 27001

NIST CSF

ISM

DISP

Job description

APAC Cyber Security Compliance Manager

Title:
APAC Cyber Security Compliance Manager
Shape and strengthen cybersecurity across the APAC region
KBR is seeking an experienced and strategic APAC Cybersecurity Compliance Manager to join our global Chief Information Security Officer (CISO) organisation. In this critical leadership role, you will be responsible for driving and implementing cybersecurity and compliance initiatives across KBR's APAC operations, ensuring the confidentiality, integrity, and availability of information assets while supporting business objectives across the region.
Working closely with the global CISO team, business leaders, and key stakeholders, you will provide security leadership, manage risk, promote compliance, and help build a strong security culture across our APAC operations.

About the Role
As the APAC Cybersecurity Compliance Manager, you will lead the development and execution of regional cybersecurity strategies aligned with KBR's global security framework, regulatory obligations, and industry best practices. You will play a pivotal role in strengthening governance, managing cybersecurity risk, supporting audits and assessments, and ensuring security outcomes are embedded into business operations.

Key Responsibilities

Information Security Strategy & Governance
- Develop and implement APAC cybersecurity strategies aligned with corporate policies, regional regulations, and business objectives.
- Establish and maintain security policies, standards, and procedures.
- Partner with business leaders to integrate cybersecurity considerations into decision-making and operational processes.
- Provide regional leadership on information security governance and compliance initiatives.

Risk Management & Compliance
- Conduct regular security risk assessments across APAC operations.
- Identify vulnerabilities, threats, and emerging risks.
- Develop and implement mitigation strategies and security controls.
- Monitor compliance with applicable laws, regulations, customer requirements, and contractual obligations.

Incident Response & Continuous Improvement
- Support regional cybersecurity incident response activities.
- Conduct post-incident reviews and lessons-learned exercises.
- Drive continuous improvement initiatives to strengthen security resilience and reduce future risk.

Security Awareness & Training
- Develop and deliver security awareness and education programs for employees, contractors, and third-party partners.
- Foster a culture of security awareness across the organisation.
- Communicate emerging threats, risks, and best practices to stakeholders.

Third-Party Risk Management
- Assess cybersecurity risks associated with vendors, suppliers, and business partners.
- Perform security due diligence activities.
- Collaborate with Procurement and Legal teams to ensure appropriate security obligations are embedded within contracts and agreements.

Reporting, Metrics & Assurance
- Develop security performance metrics and reporting frameworks.
- Provide regular updates to the CISO organisation and business leadership on security posture, compliance activities, risks, and incidents.
- Identify trends and opportunities for improvement through security reporting and analysis.

Security Audits & Assessments
- Coordinate and support internal and external security audits.
- Manage remediation activities arising from audit findings.
- Ensure ongoing compliance with regulatory, contractual, and organisational security requirements.

About You

You are a seasoned cybersecurity professional with strong leadership capabilities and a passion for enabling secure business operations. You bring a strategic mindset, excellent stakeholder engagement skills, and a deep understanding of cybersecurity governance, risk, and compliance.

Essential Requirements

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related discipline.

Ability to obtain an Australian Government Security Clearance.

Significant experience in information security management, cybersecurity compliance, risk assessment, and incident response.

Strong understanding of cybersecurity governance frameworks, controls, and regulatory requirements.

Experience engaging with senior stakeholders and influencing business outcomes.

Excellent analytical, problem-solving, communication, and interpersonal skills.

Demonstrated ability to lead initiatives and promote a strong security culture.

Technical Knowledge

Strong knowledge of information security principles, technologies, and best practices.

Experience working with recognised security frameworks and standards, including:

ISO 27001

NIST Cybersecurity Framework

Australian Essential Eight Maturity Model

Australian Information Security Manual (ISM)

Defence Industry Security Program (DISP)

Understanding of emerging cyber threats, attack vectors, and security trends.

Desirable Qualifications

CISSP (Certified Information Systems Security Professional)

CISM (Certified Information Security Manager)

Other relevant cybersecurity certifications

Why Join KBR?

At KBR, you'll have the opportunity to work on complex and meaningful projects while helping protect critical business operations across the APAC region. You'll be part of a global cybersecurity team, influence strategic security outcomes, and contribute to a culture that values innovation, collaboration, and continuous improvement.

Benefits include: