Third Party Security Assurance Lead

AustralianSuper Pty Ltd; Melbourne; Hybrid; AUD 180,000 - 250,000; Full time

Benefits offered by this job

Permanent, full-time position

Flexible, hybrid working environment

Job summary

AustralianSuper is seeking a Security Assurance Third Party Lead to own and elevate the Fund's third-party security program, engaging with senior security representatives and external partners to strengthen risk posture.

This newly created role focuses on leading assurance activities, turning findings into practical risk reduction and clear guidance for governance forums, while balancing communication, influence and technical credibility.

Qualifications

• Experience in information security, technology risk, IT audit, governance or third-party cyber/security assurance.
• Strong working knowledge of CPS 234, with CPS 230 experience highly valued.
• Experience assessing control design and effectiveness and interpreting independent assurance reports.
• Exceptional relationship-building, communication and influencing skills with senior/external stakeholders.
• Confidence facilitating workshops and translating technical risk into practical business conversations.
• Ability to manage multiple assurance engagements and remediation priorities.
• AI-forward mindset exploring how AI/automation can improve assurance practices.

Responsibilities

• Lead security assurance engagements across critical third parties, building relationships that create traction on security risks.
• Review assurance evidence, assess control effectiveness and make recommendations on gaps, risks and remediation priorities.
• Lead working groups and workshops with third parties, internal risk teams and senior stakeholders.
• Develop assurance plans and assess evidence including SOC 2 Type II, ASAE 3150, GS 007 and ISO 27001.
• Track remediation and partner security improvements, constructively challenging and escalating where required.
• Provide clear, concise assurance reporting and insights to senior leadership and governance forums.

Skills

Info security

Technology risk

IT audit

Governance

Third-party security

CPS 234 knowledge

CPS 230 experience

Control design assessment

Stakeholder management

Facilitation

Multi-engagement management

AI/Automation mindset

Job description

Lead security assurance across AustralianSuper's critical third-party ecosystem

Job Description

Third Party Security Assurance Lead

• Permanent, full-time position


• Flexible, hybrid working environment


• Lead security assurance across AustralianSuper's critical third-party ecosystem

At AustralianSuper, we truly care about our colleagues. We know work and life are intertwined. That's why we support the diverse needs of everyone and have policies that enable us all to thrive and be truly flexible. We ensure diversity is celebrated for the opportunity it provides us all to learn and grow and deliver better outcomes for members.

Your New Role

Are you a security professional who knows that influencing people can be just as important as identifying the risk?

As Security Assurance Third Party Lead, you'll take ownership of AustralianSuper's third-party security assurance program, helping strengthen the security posture of the external organisations and services critical to the Fund.

This newly created role comes at an exciting time as we uplift our security assurance capability. You'll build trusted relationships with senior security representatives, lead assurance conversations and workshops, review evidence and turn findings into practical recommendations that drive meaningful risk reduction.

Technical credibility matters, but your ability to communicate, influence and constructively challenge is what will set you apart.

What You'll Do

• Lead security assurance engagements across critical third parties, building relationships that create genuine traction on security risks.


• Review assurance evidence, assess control effectiveness and make clear recommendations on gaps, risks and remediation priorities.


• Lead working groups and workshops with third parties, internal risk teams and senior stakeholders.


• Develop assurance plans and assess evidence including SOC 2 Type II, ASAE 3150, GS 007 and ISO 27001.


• Track remediation and partner security improvements, constructively challenging and escalating where required.


• Provide clear, concise assurance reporting and insights to senior leadership and governance forums.

What You'll Need

• Experience in information security, technology risk, IT audit, governance or third-party cyber/security assurance.


• Strong working knowledge of CPS 234, with CPS 230 experience highly valued.


• Experience assessing control design and effectiveness and interpreting independent assurance reports.


• Exceptional relationship-building, communication and influencing skills, particularly with senior and external stakeholders.


• Confidence facilitating workshops, challenging constructively and translating technical risk into practical business conversations.


• Strong judgement and the ability to manage multiple assurance engagements and remediation priorities.


• An AI-forward mindset, with the curiosity to explore how AI, automation and emerging technologies can continuously improve assurance practices, productivity and the way work is delivered.

Highly Regarded

• Third-party or vendor security assurance experience.


• Knowledge of ISO 27001/2, NIST CSF and Essential Eight.


• Financial Services or Superannuation experience.


• CISSP, CISM, CISA, CRISC or ISO 27001 Lead Auditor certification.


• Experience using AI, automation or data-driven approaches to evolve security assurance and reporting.

Life at AustralianSuper

AustralianSuper is committed to colleague development, and we support our people with ongoing learning, coaching and training, as well as career opportunities across our expanding global organisation. We offer generous leave entitlements and promote a blended working environment in which all roles can flex, and we're happy to discuss what this looks like for you.

We cultivate a workplace that champions safety, respect, inclusiveness and diversity. We are committed to supporting our diverse workforce in a way that is inclusive and embraces diversity in all its forms. If you require any reasonable adjustments to the recruitment process or the role, please let our recruitment team know.

What's Next

If you’re ready to bring your energy, integrity, generosity of spirit and passion for excellent outcomes to a team strengthening security assurance and cyber resilience across AustralianSuper's extended enterprise,

Australian or New Zealand citizenship or Australian permanent residency status is required.

Progress powered by purpose.

https://www.australiansuper.com/careers/candidate-privacy-notice

AustralianSuper may use AI to review resumes and conduct initial phone interviews. This involves processing your resume, cover letter, and voice recording in Australia and the USA to help assess your suitability for the applied role. When invited to an AI phone screening, you may opt for a traditional phone screening instead.