Head of Cyber Risk and Response

4 months ago

Sydney, Australia Australian Prudential Regulation Authority (APRA) Full time

As a senior leader in the Non-Financial Risk team, the **Head of Cyber Risk and Response** will work collaboratively to deliver a range of initiatives and activities which drive the transformation of operational resilience across the industries APRA regulates.

The scope of work will include the implementation of strategies and work programs to enable significant uplift in operational resilience practices in APRA’s regulated population particularly across Cyber and Technology risk management and ensuring that APRA’s supervision activities in this area are effective, appropriately targeted and delivered efficiently.

**The team**

This role is a member of the APRA Leadership Team and the Non-Financial Risk Leadership Team within the Cross-Industry Risk Division (CRD).

The Non-Financial Risk team is responsible for providing identification, insight and supervision strategies for managing non-financial risks including operational resilience at regulated entities and across the financial services system. This includes key risk streams such as Operational Risk, Compliance, Technology and Cyber Security Risk, Climate Risk, Governance, Risk Culture and Conduct, and Accountability and Remuneration practices.

The team plays a critical role to deliver APRA’s mandate and corporate plan in partnership with APRA’s frontline supervision, cross industry risk and policy teams.

**Key responsibilities**
- **Response** - lead APRA’s response to entity and industry-wide cyber and operational incidents including assessing potential incident trajectory, engaging across internal and cross agency teams to assess impacts and determine actions and ensure internal playbooks are fit-for-purpose
- **Deliver Cyber strategy **- accountable for cyber resilience uplift activities including;
- APRA’s Cyber Program incl CPS234 Remediation oversight
- Guidance and expert support to future policy development in cyber and technology resilience including data risk management
- Understanding and monitoring emerging technology capabilities such as AI
- Working closely across whole-of-government on Cyber strategy outcomes
- **Advice** - bring a dynamic and informed approach to the provision of strategic risk insights and advice to APRA executive leaders on key issues relating to cyber, technology and data risk management
- **People **- lead a team of professionals to deliver strategic uplift and core supervision outcomes in a pooled resourcing environment. Foster an inclusive environment that creates a sense of belonging and trust and allows people to actively contribute and reach their full potential
- **Internal collaboration** - working with multiple key internal stakeholders and teams to partner on strategic uplift initiatives and core and ensure needs and requirements are understood and met
- **Stakeholder engagement **- develop external networks to support initiatives including government agencies, industry associations and key positions at regulated entities
- **Develop others** - proactively identify and raise continuous improvement opportunities for whole of team efficiencies and effectiveness
- **Contribute to leadership team** - actively contribute to the leadership of Non-Financial Risk team including management of risks, allocation of resources, development of people, prioritisation of activities, management of key relationships and overall team strategy.

**About you**
- Strong leadership and management capabilities, including the ability to organise/motivate others and drive to deadlines
- Demonstrated Leadership in the face of uncertainty and facilitates the understanding of complex circumstances to gain support and agreement
- Experience in the financial services sector in a leadership capacity, with sound understanding of the principles of prudential regulation and financial sector risks
- Excellent organisational, prioritisation, analytical and communication skills
- Relationship building, negotiation and influencing capability at senior level
- Ability to identify strategic issues and develop and implement appropriate solutions
- Strong personal integrity and an intuitive understanding of what is reasonable and prudent business practice
- Ability to establish and maintain sound working relationships with peers, team members and external stakeholders in a professional team environment.

To work with us, you need to be an Australian citizen with eligibility to gain a Baseline Security clearance.

**About APRA**

The Australian Prudential Regulation Authority (APRA) places you at the heart of Australia’s financial services industry. APRA serves the Australian community by helping ensure financial institutions deliver on the financial commitments they make, within a stable, efficient and competitive financial system.

At APRA we’re committed to providing an inclusive workplace where everyone belongs, feels valued and respected. We aspire to attract and foster diversity of background, thought, and experience, recog

  • Head of Cyber Risk and Response

    4 months ago

    Sydney, Australia APRA Full time

    Head of Cyber Risk and Response As a senior leader in the Non-Financial Risk team, the **Head of Cyber Risk and Response** will work collaboratively to deliver a range of initiatives and activities which drive the transformation of operational resilience across the industries APRA regulates. The scope of work will include the implementation of strategies...

  • Head of Cyber Risk

    2 months ago

    Sydney, Australia Westpac Banking Corporation Full time

    Head of Cyber Risk - Permanent - Sydney - Role sits in Risk Division / 2nd Line of Defence Function **How will I help?** As the Head of Cyber Risk, reporting to the Chief Risk Officer for Technology, you will join the Risk Division in a 2nd Line of Defence function and set, own, advise and report on the Group-wide approach to managing Cyber Risk. You will...

  • Head of Cyber Risk

    3 months ago

    Sydney, Australia Westpac Full time

    Permanent - SydneyRole sits in Risk Division / 2nd Line of Defence Function **How will I help?** As the Head of Cyber Risk, reporting to the Chief Risk Officer for Technology, you will join the Risk Division in a 2 nd Line of Defence function and set, own, advise and report on the Group-wide approach to managing Cyber Risk. You will have responsibility for...

  • Head of Cyber Security and IT Risk

    7 months ago

    Sydney, Australia LGT Crestone Wealth Management Full time

    Min Experience- 10 yearsYour team - Working as a part of the Risk, Legal & Compliance team with overall responsibility to drive all strategic and operational cyber security and IT risk functions. - Working alongside the Head of Technology, senior business and risk executives and project management team within the reporting structure of the Chief Risk...

  • Cyber Security Risk Manager

    3 months ago

    Sydney, Australia University of New South Wales Full time

    **Job no**: 527962 **Work type**: full time **Location**: Sydney, NSW **Categories**: Information Technology, Cyber - Employment Type: full time continuing role as a Cyber Security Risk Manager - Excellent salary package including superannuation - Location: UNSW Kensington Campus (Hybrid Working Opportunities) **About UNSW**: UNSW isn’t like other places...

  • Head of Cyber Security, Governance

    2 weeks ago

    Sydney, Australia University of New South Wales Full time

    **Job no**: 529814 **Work type**: Full Time **Location**: Sydney, NSW **Categories**: Information Technology, Cyber - Employment Type: full time continuing role as Head of Cyber Security and Governance - Excellent salary package including superannuation - Based Kensington, Sydney. Hybrid options available **Join Our High-Performing Cyber Security Team at...

  • Cyber Risk Manager

    6 months ago

    Sydney, Australia Allianz Australia Full time

    **CYBER RISK MANAGER - RISK AND COMPLIANCE MANAGER | SYDNEY, NSW** At Allianz, we’re proud to be one of the world’s leading insurance and asset management brands, with a workforce as diverse as the world around us. We care about our customers, which is why we hire the very best people to further our commitment to securing the future of our customers,...

  • Manager Cyber Risk

    4 months ago

    Sydney, Australia Commonwealth Bank of Australia Full time

    Manager Cyber Risk **See yourself in our team**: The Technology and Operations (Tech & Ops) Risk team is responsible for providing specialist Operational Risk and Compliance (OR&C) advice and assurance of decisions made across the Technology, Chief Operating Office, and Business Unit divisions. **Do work that matters**: The Manager Cyber Risk plays and...

  • Cyber Sec Gov

    6 months ago

    Sydney, Australia University of New South Wales Full time

    **Job no**: 525766 **Work type**: full time **Location**: Sydney, NSW **Categories**: Information Technology, Cyber - Employment: Full time (35 hours per week) - Duration: Continuing - Remuneration: Excellent salary package including leave loading and generous superannuation - Location: Based in Kensington, Sydney (hybrid working available) **About UNSW...

  • Cyber Sec Gov

    6 months ago

    Sydney, Australia University of New South Wales Full time

    **Job no**: 523893 **Work type**: full time **Location**: Sydney, NSW **Categories**: Information Technology - Employment: Full time (35 hours per week) - Duration: Continuing - Remuneration: Excellent salary package including leave loading and generous superannuation - Location: Based in Kensington, Sydney (hybrid working available) **About UNSW...

  • Head of Cyber Security

    7 months ago

    Sydney, Australia SustainRecruit Full time

    **Classification**: Tech **Job Location**: - Sydney NSW**Contract Type**: Full Time **Salary**: $220,000 - $270,000 + Super + Bonus **Company**: Join a leading financial services firm that has gone from strength to strength, known for delivering great long-term results with a fantastic working culture. This renowned financial services institution had...

  • Ciso and Head of Cyber Risk, Au

    3 weeks ago

    Sydney, Australia PayPal, Inc. Full time

    CISO and Head of Cyber Risk, AU **The Company** PayPal has been revolutionizing commerce globally for more than 25 years. Creating innovative experiences that make moving money, selling, and shopping simple, personalized, and secure, PayPal empowers consumers and businesses in approximately 200 markets to join and thrive in the global economy. We operate...

  • Head of Cyber Security

    2 weeks ago

    Sydney, Australia Lumus Imaging Full time

    **Date**:18 Dec 2024 **Location**: Sydney, New South Wales, AU, 2000 **Company**:Healius **Job reference**: #13263 **Brand**:Lumus Imaging **Location**: Sydney **Work type**: Full Time (Permanent) Are you ready to lead the charge in protecting critical infrastructure and shaping the future of healthcare through cutting-edge technology? Lumus Imaging...

  • Head of Cyber Strategy

    2 months ago

    Sydney, Australia iCare External Full time

    **Head of Cyber Strategy & Advisory** - **Sydney** Accountable the continuous improvement and delivery of cyber and information security strategy and advisory services. - Responsible for alignment of cyber & information security strategy to business objectives - 10 yrs’ experience in comparative organisations & support to achieve ISO27001 certification. -...

  • Cyber Defence Risk Manager

    2 months ago

    Sydney, Australia Commonwealth Bank of Australia Full time

    Cyber Defence Risk Manager **See yourself in our team**: The Technology and Operations (Tech & Ops) Risk team is responsible for providing specialist Operational Risk and Compliance (OR&C) advice and assurance of decisions made across the Technology, Chief Operating Office, and Business Unit divisions. **Do work that matters**: You will play a key role...

  • Cyber Security Risk Advisor

    6 months ago

    Sydney, Australia University of New South Wales Full time

    **Job no**: 525136 **Work type**: full time **Location**: Sydney, NSW **Categories**: Information Technology, Cyber - Employment: Full time (35 hours per week) - Continuing role as a Cyber Security Risk Advisor - Remuneration: Excellent salary package including leave loading and generous superannuation - Location: Based in Kensington, Sydney (hybrid...

  • Cyber Security Risk Advisor

    2 months ago

    Sydney, Australia University of New South Wales Full time

    **Job no**: 527915 **Work type**: Full Time **Location**: Sydney, NSW **Categories**: Information Technology, Cyber - Employment Type: full time continuing role as a Cyber Security Risk Advisor - Exceptional salary package including generous superannuation - Location: UNSW Kensington Campus (Hybrid Working Opportunities) **About UNSW**: UNSW isn’t like...

  • Head of Cyber Security

    6 months ago

    Sydney, Australia mx51 Full time

    Head of Cyber Security mx51 is a payments-as-a-service solution for banks, non-bank acquirers, and other merchant service providers. We are building a payment platform that allows merchants to accept payments in-store, in-app and online, whilst consolidating all their data on a real-time business management dashboard. We're a bank grade scale-up which...

  • Cyber Risk Analyst

    11 hours ago

    Sydney, Australia GWG Full time

    12 month contract - 100% remote opportunity - Large well-established organisation **The Company** This large organisation is dynamic and rapidly evolving in a changing ecosystem. Seeking to improve safety, performance, and culture while driving efficiency, managing costs, and creating value in a best practice environment. As the business continues its path...

  • Head of Cyber Assurance

    2 months ago

    Sydney, Australia iCare External Full time

    **About the Role** Accountable for leading our cyber-security assurance and governance team within digital and transformation, you will develop and drive icare’s Cyber Security posture and maturity against required policies and standards and uplift compliance of our partners and third-party suppliers. You will use your professional cyber expertise,...