LeadRisk Assessor_Cybersecurity

About XPT

• XPT Software Australia PTY Ltd, incorporated in 2016, is a Software Services company
  
• XPT works with top clients across Australia in Banking, Insurance, Telecom, Retail, Energy, Mining and Manufacturing domains.
  
• We have 120+ technocrats in Australia working at our client locations. 
  
• XPT Software Australia is part of group companies which has global presence across India & Europe.
  
• We have served 100+ clients globally, fulfilling their onsite-offshore needs.
  

Lead Risk Assessor

Role Summary Senior cyber security risk professional responsible for leading risk assessments, providing strategic risk guidance, and influencing business decisions through clear communication of cyber security risks and opportunities.

Key Accountabilities

·         Lead cyber security risk assessments across projects, products, and technology initiatives.

·         Collaborate with project teams to identify, assess, and address security gaps and control deficiencies.

·         Communicate complex technical risks in clear business terms, including to executive stakeholders through risk decision-making processes.

·         Make informed risk-based decisions and manage stakeholder expectations effectively.

·         Lead the uplift of team processes, documentation, and engagement models.

Additional Responsibilities

·         Collaborate with business stakeholders, engineers, delivery teams, product vendors, partners, and cyber assurance teams to understand and communicate cyber risk.

·         Define and maintain reusable assets including standardised findings, templates, and process improvements.

·         Contribute to the creation and governance of security strategy, standards, frameworks, and policies.

·         Identify and communicate security risks in a timely manner while incorporating insights from privacy, legal, engineering, and operational stakeholders.

·         Develop strategic relationships across industry and technology vendors to anticipate emerging threats and opportunities.

·         Mentor and coach risk assessors and secondees through guidance, feedback, and knowledge sharing.

·         Manage complex initiatives while simplifying outcomes to support effective delivery and execution.

Qualifications and Experience

·         Minimum 15 years of experience within Cyber Security.

·         At least 8 years of experience in a Governance, Risk and Compliance (GRC) or Risk Management function.

·         Practical experience conducting technical risk assessments.

·         Knowledge of industry frameworks and standards including ISO 27001, PCI-DSS, NIST, and enterprise security frameworks.

·         Strong stakeholder engagement and communication skills with the ability to translate technical risks into business insights.

·         Experience working within large and complex enterprise environments.

Highly Desirable

·         Previous experience in a non-cyber risk or GRC role.

·         Industry certifications such as CRISC, CISSP, CISM, or SABSA.

·         Experience working within Agile and DevOps environments.