Senior Cyber Assurance & Compliance Lead

Air Services Australia; Canberra; Presencial; AUD 180.000 - 240.000; Jornada completa

Descripción de la vacante

Airservices Australia is seeking a Senior Cyber Compliance & Assurance Specialist to join our Cyber Design & Assurance team. You will lead governance, risk management and compliance activities across IT, OT, cloud and critical infrastructure.

You will manage audits, IRAP activities and regulatory reviews, develop risk registers and ensure security controls meet ISM, PSPF and Essential Eight, while collaborating with vendors and delivery partners to achieve ATO and accreditation outcomes.

Formación

• Significant experience in cyber security governance, risk management, compliance and assurance in complex enterprise, government, critical infrastructure or regulated environments.
• Experience managing audit activities, remediation programs and compliance improvement initiatives.
• Experience with ISO 27001, NIST CSF, SOCI Act, Privacy Act, CIS Controls and IRAP assessment processes.
• Strong working knowledge of Australian Government security frameworks including ISM, PSPF and Essential Eight.
• Experience with Governance, Risk and Compliance (GRC) platforms such as ServiceNow IRM/GRC, Archer, MetricStream or similar.
• Experience in critical infrastructure, OT, aviation, government, defence, utilities or similarly regulated industries.
• Well-developed written and oral communication skills for varied audiences.

Responsabilidades

• Lead and support cyber security governance, risk management, compliance and assurance activities across Airservices information technology (IT), operational technology (OT), cloud and critical infrastructure environments.
• Conduct and oversee security assurance activities to support system accreditation, Authorisation to Operate (ATO), reassessment, and ongoing compliance obligations.
• Lead cyber security risk assessments and compliance reviews for new and existing systems, projects and services.
• Develop, maintain and monitor cyber security risk registers, treatment plans and risk acceptance artefacts.
• Review security documentation provided by vendors, suppliers and service providers to ensure compliance with contractual, regulatory and security requirements.
• Plan, coordinate and participate in audits, compliance assessments, IRAP activities and regulatory reviews, including remediation actions.
• Monitor compliance with ISM, PSPF, SOCI, Privacy Act and aviation obligations.
• Provide expert guidance on preventative, detective and corrective security controls and their effectiveness.
• Support evaluation and operation of GRC platforms and tooling for risk management, compliance and reporting.

Conocimientos

Cyber governance

Risk management

Compliance & assurance

Audit management

GRC tools

Educación

CRISC

CISSP

IRAP Assessor

Herramientas

ServiceNow IRM/GRC

Archer

MetricStream

Descripción del empleo

Airservices Australia is seeking a Senior Cyber Compliance & Assurance Specialist to join our Cyber Design & Assurance team. You will lead governance, risk management and compliance activities across IT, OT, cloud and critical infrastructure.

You will manage audits, IRAP activities and regulatory reviews, develop risk registers and ensure security controls meet ISM, PSPF and Essential Eight, while collaborating with vendors and delivery partners to achieve ATO and accreditation outcomes.