Senior Cyber Risk Strategist

Xpt Software Australia Pty Ltd; Melbourne; On-site; AUD 150,000 - 190,000; Full time

Job summary

XPT Software Australia Pty Ltd in Melbourne is seeking a Senior cyber security risk professional to lead risk assessments, provide strategic risk guidance, and influence business decisions through clear communication of cyber security risks.

You will collaborate with project teams, executives, and governance groups to identify and address security gaps, while uplifting risk processes and engagement models across client engagements in Australia.

Qualifications

• Minimum 15 years of experience in cyber security.
• At least 8 years in Governance, Risk and Compliance (GRC).
• Experience conducting technical risk assessments.
• Knowledge of ISO 27001, PCI-DSS, NIST and enterprise security frameworks.
• Strong stakeholder engagement and communication skills.
• Experience in large, complex enterprise environments.
• Experience in non-cyber risk or GRC roles is a plus.
• Industry certifications CRISC, CISSP, CISM, or SABSA.

Responsibilities

• Lead cyber security risk assessments across projects, products, and technology initiatives.
• Collaborate with project teams to identify, assess, and address security gaps and control deficiencies.
• Communicate complex technical risks in clear business terms to executives through risk decision processes.
• Make informed risk-based decisions and manage stakeholder expectations.
• Lead the uplift of team processes, documentation, and engagement models.
• Define and maintain reusable assets including standardised findings, templates, and process improvements.
• Contribute to security strategy, standards, frameworks, and policies.
• Develop strategic relationships across industry vendors to anticipate threats and opportunities.

Skills

Cyber security

Risk assessment

Stakeholder engagement

GRC

Education

CRISC certification

CISSP certification

CISM certification

SABSA certification

Job description

XPT Software Australia Pty Ltd | Contract

Melbourne,Sydney,Brisbane,perth, Australia

• XPT SoftwareAustralia PTY Ltd, incorporated in 2016, is a Software Services company
• XPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.
• We have 120+technocrats in Australia working at our clientlocations.
• XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.
• We have served100+ clients globally, fulfilling their onsite-offshoreneeds.

Job Description

RoleSummary Senior cyber security risk professional responsiblefor leading risk assessments, providing strategic risk guidance, andinfluencing business decisions through clear communication of cyber securityrisks and opportunities.

KeyAccountabilities

• Lead cyber security riskassessments across projects, products, and technology initiatives.
• Collaborate with project teamsto identify, assess, and address security gaps and control deficiencies.
• Communicate complex technicalrisks in clear business terms, including to executive stakeholders through risk decision-making processes.
• Make informed risk-baseddecisions and manage stakeholder expectations effectively.
• Lead the uplift of teamprocesses, documentation, and engagement models.

AdditionalResponsibilities

• Collaborate with businessstakeholders, engineers, delivery teams, product vendors, partners, and cyberassurance teams to understand and communicate cyber risk.
• Define and maintain reusableassets including standardised findings, templates, and process improvements.
• Contribute to the creation and governance of security strategy, standards, frameworks, and policies.
• Identify and communicate security risks in a timely manner while incorporating insights from privacy, legal, engineering, and operational stakeholders.
• Develop strategic relationshipsacross industry and technology vendors to anticipate emerging threats and opportunities.
• Mentor and coach risk assessorsand secondees through guidance, feedback, and knowledge sharing.
• Manage complex initiatives while simplifying outcomes to support effective delivery and execution.

Qualificationsand Experience

• Minimum 15 years of experiencewithin Cyber Security.
• At least 8 years of experiencein a Governance, Risk and Compliance (GRC) or Risk Management function.
• Practical experience conductingtechnical risk assessments.
• Knowledge of industryframeworks and standards including ISO 27001, PCI-DSS, NIST, and enterprisesecurity frameworks.
• Strong stakeholder engagementand communication skills with the ability to translate technical risks intobusiness insights.
• Experience working within largeand complex enterprise environments.
• Previous experience in anon-cyber risk or GRC role.
• Industry certifications such asCRISC, CISSP, CISM, or SABSA.
• Experience working within Agileand DevOps environments.