Senior Cyber Risk & Compliance Specialist

Talenza; New South Wales; On-site; AUD 120,000 - 180,000; Full time

Job summary

Talenza in Sydney, NSW, seeks an experienced Cyber Risk Specialist to provide independent oversight of cyber security risks across our complex financial services environment. You will review policies, conduct risk assessments, and challenge technology and security teams to ensure robust controls and regulatory alignment.

You will monitor APRA requirements, assess controls across cloud, IAM, and broader cyber domains, and support reporting to executives and governance committees.

Qualifications

• Experience in Cyber Security Risk, Information Security Risk, Cyber GRC, Security Assurance or IT Audit.
• Strong understanding of cyber security frameworks and regulatory obligation.
• Experience in risk assessments, control testing, assurance or governance activities.
• Certifications such as CISSP, CISM, CRISC or CISA are highly regarded.

Responsibilities

• Review and enhance cyber security policies, processes and controls.
• Conduct cyber risk assessments and provide guidance on remediation strategies.
• Perform control assurance activities and independent control testing.
• Provide oversight and challenge to technology and security teams on cyber risk matters.
• Monitor compliance with APRA regulatory requirements
• Assess the effectiveness of security controls across cloud, identity, access management and broader cyber security domains.
• Support cyber risk reporting for executives and governance committees.
• Identify emerging cyber threats, vulnerabilities and AI-related security risks.
• Review incidents and root cause analyses to ensure sustainable remediation outcomes.

Skills

Cyber risk

Information security risk

Cyber GRC

Security assurance

IT audit

Job description

Talenza in Sydney, NSW, seeks an experienced Cyber Risk Specialist to provide independent oversight of cyber security risks across our complex financial services environment. You will review policies, conduct risk assessments, and challenge technology and security teams to ensure robust controls and regulatory alignment.

You will monitor APRA requirements, assess controls across cloud, IAM, and broader cyber domains, and support reporting to executives and governance committees.