Senior Cyber Risk Strategy Lead

Xpt Software Australia Pty Ltd; Melbourne; On-site; AUD 150,000 - 190,000; Full time

Job summary

XPT Software Australia Pty Ltd in Melbourne is seeking a Senior cyber security risk professional to lead risk assessments, provide strategic risk guidance, and influence business decisions through clear communication of cyber security risks.

You will collaborate with project teams, executives, and governance groups to identify and address security gaps, while uplifting risk processes and engagement models across client engagements in Australia.

Qualifications

• Minimum 15 years of experience in cyber security.
• At least 8 years in Governance, Risk and Compliance (GRC).
• Experience conducting technical risk assessments.
• Knowledge of ISO 27001, PCI-DSS, NIST and enterprise security frameworks.
• Strong stakeholder engagement and communication skills.
• Experience in large, complex enterprise environments.
• Experience in non-cyber risk or GRC roles is a plus.
• Industry certifications CRISC, CISSP, CISM, or SABSA.

Responsibilities

• Lead cyber security risk assessments across projects, products, and technology initiatives.
• Collaborate with project teams to identify, assess, and address security gaps and control deficiencies.
• Communicate complex technical risks in clear business terms to executives through risk decision processes.
• Make informed risk-based decisions and manage stakeholder expectations.
• Lead the uplift of team processes, documentation, and engagement models.
• Define and maintain reusable assets including standardised findings, templates, and process improvements.
• Contribute to security strategy, standards, frameworks, and policies.
• Develop strategic relationships across industry vendors to anticipate threats and opportunities.

Skills

Cyber security

Risk assessment

Stakeholder engagement

GRC

Education

CRISC certification

CISSP certification

CISM certification

SABSA certification

Job description

XPT Software Australia Pty Ltd in Melbourne is seeking a Senior cyber security risk professional to lead risk assessments, provide strategic risk guidance, and influence business decisions through clear communication of cyber security risks.

You will collaborate with project teams, executives, and governance groups to identify and address security gaps, while uplifting risk processes and engagement models across client engagements in Australia.