Lead Risk Assessor - Contract - Australia

Requirements

• Leading cybersecurity risk assessments across customer projects
  
• Collaborating with project teams to identify and address security gaps
  
• Communicating complex technical issues in clear business terms, including to executive stakeholders, such as through the risk decisioning process.
  
• Making informed decisions and managing stakeholder expectations
  
• Leading the uplift of team processes, documentation, and engagement models
  

• Actively collaborate with business stakeholders, engineers, delivery teams, product vendors and partners, as well as other Cyber Assurance stakeholders, to adequately understand and convey the cyber risk of a delivered product or solution
  
• Define and document re-usable assets such as standardised findings and process improvements to drive improved capability within the function
  
• Input into the creation and governance of security strategy, standards and frameworks to ensure a coherent and optimised overall security policy within the customer.
  
• Identify and eƯectively communicate security risks to business stakeholders in a timely manner - harvesting and harmonising insights from all relevant areas including privacy, legal, engineering and operational stakeholders.
  
• Foster strategic relationships across industry and technology vendors to anticipate and plan for emerging opportunities and threats to inform risk assessment.
  
• Mentor and be a role model for new and existing Risk Assessors and candidates on secondment, including shadowing, process guidance and providing feedback.
  
• Handle complex initiatives while simplifying them to support eƯective execution.
  

• Minimum 15+ years of experience within Cybersecurity, with at least 8+ years of experience in GRC ot risk function.
  
• Practical experience in technical risk assessment.
  
• Familiarity with standards like ISO, PCI, NIST, and E8
  
• A collaborative mindset and ability to translate complex technical risks into clear, actionable business insights
  
• Experience working in large, complex environments
  

• Prior experience within a non-cyber-related risk or GRC role.
  
• Industry certifications such as CRISC, CISSP, CISM or SABSA
  
• Experience in Agile and DevOps​