Senior Manager - Cyber Risk

Woolworths Supermarket; Geehi; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Team Discounts

Parental Leave

Sonder Wellness Support

Diversity & Inclusion

Job summary

Woolworths Group is recruiting a Senior Cyber Risk Leader to evolve its cyber risk capabilities from compliance to threat-led risk management. You will bridge deep technical operations with enterprise risk management, translating risk into business impact for SLT forums.

The role requires 10+ years in IT risk or cyber security, with 3LoD experience, and a proven ability to influence senior stakeholders in a hybrid, Australia-based environment.

Qualifications

• 10+ years of IT risk, cyber security or technology audit experience.
• Experience in a formal 3LoD risk model and first-line risk ownership.
• Ability to translate technical risk into business impact for executives.

Responsibilities

• Lead threat-led risk modeling and RACM with CTI input.
• Deliver executive risk reporting translating threat intel into KPIs.
• Operationalise risk appetite with quantifiable thresholds.
• Provide governance and advisory across multiple tech domains.
• Oversee risk acceptance and ensure residual risk transparency.
• Lead post-incident risk evaluations and lessons learned.

Skills

IT Risk

Cyber Security

Technology Audit

3LoD

Stakeholder Influence

Executive Reporting

Tools

CTI feeds

FAIR

Job description

Join a customer-obsessed technology business at the heart of Australia’s largest retailerLead the shift from reactive compliance to a proactive, threat-led cyber defense strategyNorwest (Sydney) based with a hybrid working modelWe are Woolworths GroupWe are Woolworths Group. 200,000+ bright minds, passionate hearts and unique perspectives connected by a shared Purpose – ‘to create better experiences together for a better tomorrow.’ It’s that Purpose that fuels our ambition to explore new ideas, make brave commitments and innovate better ways to meet the food and everyday needs of more than 24 million customers every week.If you’re excited to turn today’s blue sky thinking into a better tomorrow for future generations, you’ll find yourself supported and enriched in a dynamic, inclusive and empowering workplace that reflects the diverse communities we serve. With a culture of genuine care, a flexible approach to work and opportunities across the group to grow your career and make a meaningful impact, the possibilities for what we can achieve together are endless.The OpportunityDrive the evolution of Woolworths Group’s cyber risk capability—the "Trust Engine"—from traditional, qualitative compliance to a proactive, threat-led risk model. As the core 1st Line risk authority within Cyber, this pivotal role bridges the gap between deep technical operations and enterprise risk management. You will operationalise high-level risk appetite into quantifiable thresholds, ensure consistency across solution risk assessments, and champion cyber risk posture within executive and Senior Leadership Team (SLT) forums.What you’ll doThreat-Led Risk Modeling & RACM: Partner directly with Cyber Threat Intelligence (CTI) to execute threat-led risk modeling, evaluating critical controls against the Risk & Control Assessment Matrix (RACM) to refine technical and operational risk ratings.Strategic Risk Reporting: Deliver executive-level risk reporting that translates complex threat intelligence and KRIs into clear, business-focused insights to drive informed governance and investment prioritisation.Operationalising Risk Appetite: Translate strategic cyber risk appetite into quantifiable thresholds, establishing clear benchmarks for asset tiering, consistent risk acceptance, and decision-making.Governance & Systemic Advisory: Moderate solution-specific and systemic risk assessments to guarantee enterprise-wide consistency, while providing advisory on high-impact capabilities that span multiple technology domains.Risk Acceptance & Transparency: Oversee formal risk acceptances across domains, ensuring residual risk is transparent, appropriately owned, and aligned with organisational risk appetite.Post-Incident Risk Alignment: Lead risk evaluations following major security incidents to validate control efficacy, calibrate risk ratings, and ensure lessons learned adjust our long-term risk direction.What you’ll bringCore Experience: 10+ years of experience in IT Risk, Cyber Security, or Technology Audit, with demonstrated leadership in a formal Three Lines of Defence (3LoD) risk model and Line 1 capacity.Change Leadership: A proven track record of maturing risk functions by partnering across the business to evolve from compliance-heavy, qualitative foundations toward threat-led, quantified risk maturity.Technical & Business Fluency: Expertise in leveraging CTI feeds for control prioritisation and established risk quantification methodologies (e.g., FAIR), combined with the skill to translate complex technical exposure into business-relevant narratives and financial impact.Stakeholder Influence: Experience preparing executive and board-level reporting, balancing deep technical engagement with the enterprise consistency required by Group Risk and Audit functions.What you’ll ExperienceTeam Discounts - Team discounts across our range of Woolworths Group brands you know and love and a robust rewards program that celebrates and incentivises purpose-driven work.12 weeks paid parental leave for primary caregivers. Woolworths Group will also continue to pay superannuation for up to 12 months (subject to relevant caps) while the Team Member is on parental leave (paid or unpaid).4 weeks paid leave for secondary caregiversWellness - Access to Sonder. Sonder provides free confidential 24/7 personalised financial, medical safety, psychological or physical support for team members and their families.Everyone belongs at Woolworths GroupAs one of the largest employers in Australia and New Zealand, we aim to create a truly inclusive workplace where everyone feels that they belong, can be their best selves, and reach their full potential.Diversity, equity, inclusion, and belonging are key to realising our purpose of better together for a better tomorrow. We recognise the value our team’s diversity brings to our business, customers, and communities and that teams with diverse experiences and backgrounds enrich our group and are better able to innovate and solve problems.