Job Opportunities in Australia

Role Responsibilities

• Develop and implement risk management frameworks and processes to identify and evaluate the likelihood and impact of potential risks across various aspects of the organisation, including financial, operational, strategic, security and compliance risks.
• Develop key risk indicators (KRIs) and risk appetite statements to guide decision-making processes.
• Develop and recommend strategies to manage or mitigate identified risks.
• Design, implement and maintain risk management policies and procedures that are in compliance with legal and regulatory requirements. Especially security policies, standards, procedures, and guidelines to ensure the organisation's information assets are adequately protected (including any 3rd parties that access the organizations systems).
• Monitor the effectiveness of risk management strategies including conducting regular risk audits and compliance checks to uncover vulnerabilities, security audits to ensure compliance with ISO 27001 and monitor the effectiveness of the organisation's Business Continuity Plans.
• Ensure that there is an effective Contract and Regulatory compliance monitoring process in place to ensure that contractual commitments and external regulatory requirements are complied with.
• Ensure that there is an effective security Incident Monitoring process in place to monitor security events and alerts to detect and respond to potential security threats in real-time.
• Prepare and present regular risk reports for senior management and the board of directors, highlighting key risks, mitigation efforts, and areas requiring attention.

Role Requirements

• Bachelor’s degree in Risk Management, Finance, Business Administration, or a related field. A master’s degree or professional certifications (e.g., Certified Risk Management Professional - CRMP, Certified Risk Manager – CRM, CISSP, CISM, CISA) and understanding of ISO 27001, ITIL, Cobi T are advantageous.
• Proven experience in risk management, including IT security or a related field.
• Strong knowledge of regulatory requirements and industry best practices in risk management.
• Proficiency in risk assessment methodologies
• A solid understanding of cybersecurity principles, practices, and technologies and related security frameworks, standards and regulations (e.g. NIST, ISO, GDPR).
• Experience in project management and the ability to lead cross-functional teams in implementing risk management initiatives and projects.
• Up-to-date knowledge of emerging cybersecurity threats, trends, and best practices, and a commitment to continuous learning and professional development.