Senior Cyber Governance & Risk Lead

Cuscal Limited; Sydney; On-site; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Recognition and growth

Wellbeing focus

Diversity and inclusion

Job summary

Cuscal invites a Senior Cyber Governance, Risk & Assurance Specialist to strengthen cybersecurity governance, risk management and assurance capabilities within its Cyber Security team. This 12-month max-term contract role focuses on regulatory alignment and risk-informed decision making across the business.

You’ll develop and maintain policies, conduct risk assessments, and collaborate with stakeholders to embed risk-aware cybersecurity practices, ensuring ongoing compliance with CPS 234, PCI

Qualifications

• 5+ years in cybersecurity governance, risk management, assurance or compliance roles.
• Strong knowledge of frameworks like ISO 27001, NIST, CPS 234, PCI DSS and ASD Essential Eight.
• Experience conducting cyber risk assessments, control reviews and assurance activities.
• Understanding third-party risk, vulnerability management and incident response.
• Excellent communication and stakeholder engagement across a complex organisation.

Responsibilities

• Support development and maintenance of cybersecurity policies and governance frameworks.
• Ensure alignment with regulatory and industry standards including CPS 234, PCI DSS and SOC 2.
• Conduct cyber risk assessments across technology environments and third-party suppliers.
• Identify risks, prioritise mitigations and deliver control testing and audit support.
• Monitor cyber risk and compliance, reporting to leadership and risk committees.

Skills

Cyber governance

Cyber risk management

Regulatory compliance

Stakeholder engagement

ISO 27001

Education

Bachelor's degree in CS/Cyber Security

Tools

Vulnerability management

Incident response

Third-party risk management

Job description

Cuscal invites a Senior Cyber Governance, Risk & Assurance Specialist to strengthen cybersecurity governance, risk management and assurance capabilities within its Cyber Security team. This 12-month max-term contract role focuses on regulatory alignment and risk-informed decision making across the business.

You’ll develop and maintain policies, conduct risk assessments, and collaborate with stakeholders to embed risk-aware cybersecurity practices, ensuring ongoing compliance with CPS 234, PCI