Cyber Security Risk Advisor

6 days ago


Sydney, New South Wales, Australia University of New South Wales Full time

About the Role

The University of New South Wales is seeking a highly skilled Cyber Security Risk Advisor to join our team. As a key contributor to the operational delivery of a fit-for-purpose and adaptive Cyber Security Governance framework and Information Security Management System (ISMS), you will be responsible for the management and assessment of information security risks associated with ICT services and IT initiatives.

Key Responsibilities

  • Delivery of risk advisory and risk assessment services to University stakeholders.
  • Review solution/capability design and architecture artefacts, identify and assess security risks, recommend and prepare high quality reports detailing security issues and risk treatment actions.
  • Perform and oversee risk assessment of 3rd party/supply chain risk exposure.
  • Update and manage the cyber risk register with risks from projects, penetration tests, and exemptions.
  • Socialise the risks to the relevant teams and administer the completion of risk treatment and policy compliance initiatives prior to deployment or change.
  • Guide and educate University stakeholders in the practical application of security and risk management concepts, principles, strategies and relevant industry standards.
  • Provide expert advice on cyber security compliance by ensuring and communicating adherence to policies, standards, architecture and strategies (including surrounding cloud services).
  • Ensuring any non-compliance, control under-performance or risk beyond appetite is appropriately recorded and effectively escalated for remediation.
  • Drive penetration testing scope validation, penetration test report review, risk assessment and retesting recommendations of IT systems and infrastructure as a part of project assurance.
  • Analyse and advise on new or complex exemptions requests.
  • Identify and recommend required changes to cyber security policies and standards.
  • Deliver periodic cyber security risk advisory service SLA and KPI metrics to drive compliance.
  • Support the independent audit of cyber security controls on behalf of the University, including statutory audits completed by the Audit Office of NSW.
  • Continually stay up to date and aware of legal, regulatory compliance and contractual obligations that are relevant to the University's management of cyber security risk.
  • Promote awareness of the University's internal and external environment for emerging cyber security threats.
  • Develop and manage effective working relationships with internal and external stakeholders to develop innovative solutions that meet business needs.
  • Promote a culture of continuous improvement, championing professional standards, innovation, and methods.

Requirements

  • Minimum 5 years' experience in the delivery of cyber security risk assessment, consulting, and advisory services, ideally with experience working for a global consulting firm, technology giant or large government agency or defence consultancy.
  • A relevant Degree with extensive experience in cyber security governance, compliance, risk management or cyber security operations within major organisations or an equivalent level of knowledge gained through any other combination of education, training, and experience.
  • Strong cyber security GRC fundamentals and strong knowledge of cyber security principles and practices.
  • Excellent understanding of industry-wide security standards and compliance frameworks such as ISO 27001, NIST 800-53, CSA, Essential 8, PCI DSS, COBIT 5, Mitre ATT&CK etc.
  • Relevant industry certification(s) such as CISSP (Ideal), CEH, CISM, CRISC, GSEC, AWS Security Speciality, Microsoft Azure (highly desirable).
  • Excellent understanding of current security technologies, products, and services, including native cloud security controls in AWS and Azure.
  • Strong interpersonal, communication and negotiation skills including ability to develop effective relationships and influence key stakeholders at all levels in the organisation.
  • Ability to present with credibility and translate technical and complex information concisely for diverse audiences using strong analytical and problem-solving skills.
  • Demonstrated high level of personal motivation, resilience, and ability to work effectively individually or in teams.


  • Sydney, New South Wales, Australia University of New South Wales Full time

    About the RoleThe University of New South Wales is seeking a highly skilled Cyber Security Risk Advisor to join our team. As a key contributor to the operational delivery of a fit-for-purpose and adaptive Cyber Security Governance framework and Information Security Management System (ISMS), you will be responsible for the management and assessment of...


  • Sydney, New South Wales, Australia Hudson Full time

    About the RoleHudson is seeking a highly motivated and detail-oriented Cyber Security Advisor to join their team. As a Cyber Security Advisor, you will play a critical role in providing technical support and solutions to clients, helping them navigate and mitigate cyber risks.Key ResponsibilitiesEngage professionally and empathetically with clients,...


  • Sydney, New South Wales, Australia Hudson Australia Full time

    About the RoleWe are seeking a highly motivated and detail-oriented Cyber Security Advisor to join our team at Hudson Australia. As a Cyber Security Advisor, you will play a critical role in providing technical support and solutions to our clients, helping them navigate and mitigate cyber risks.Key Responsibilities:Engage with clients to understand their...


  • Sydney, New South Wales, Australia Hudson Australia Full time

    About the RoleWe are seeking a highly motivated and detail-oriented Technical Advisor to join our team at Hudson Australia. As a Technical Advisor, you will play a critical role in providing technical support and solutions to our clients, helping them navigate and mitigate cyber risks.Key ResponsibilitiesEngage with clients to understand their technical...


  • Sydney, New South Wales, Australia Hudson Australia Full time

    About the RoleWe are seeking a highly motivated and detail-oriented Technical Advisor to join our team at Hudson Australia. As a Technical Advisor, you will play a critical role in providing technical support and solutions to our clients, helping them navigate and mitigate cyber risks.Key ResponsibilitiesEngage with clients to understand their technical...


  • Sydney, New South Wales, Australia XM Cyber Full time

    About the RoleXM Cyber is a pioneering cyber security company that offers a continuous threat and exposure management solution. We are seeking an experienced Channel Manager to join our team and drive the growth of our channel community in the ANZ region.Key ResponsibilitiesDevelop and execute channel plans to drive success and fuel the accelerated growth of...


  • Sydney, New South Wales, Australia Vero Insurance Full time

    Principal Cyber Advisor GRC Job DescriptionAbout the RoleThe Principal Cyber Advisor, Governance, Risk and Compliance (GRC), plays a critical role in coordinating and overseeing activities across the Cyber Security team. This position involves managing work to standardize governance, risk management, and compliance across Cyber Security, ensuring the ability...


  • Sydney, New South Wales, Australia XM Cyber Full time

    About XM CyberXM Cyber is a pioneering threat and exposure management solution that revolutionizes the way organizations approach cyber security. Our cutting-edge technology enables clients to identify and remediate vulnerabilities with unprecedented efficiency, driving the most effective remediation options.Job SummaryWe are seeking an experienced and...


  • Sydney, New South Wales, Australia XM Cyber Full time

    About XM CyberXM Cyber is a pioneering cyber security company that offers a cutting-edge threat and exposure management solution. Our innovative technology enables organizations to efficiently remediate threats and exposures, driving the most effective remediation options for clients. We are a SAAS-based pre-IPO cyber security vendor backed by the largest...


  • Sydney, New South Wales, Australia XM Cyber Full time

    About the RoleXM Cyber is a pioneering cyber security company that offers a continuous threat and exposure management solution. We are seeking an experienced Channel Manager to join our team and drive the growth of our channel community in the ANZ region.Key ResponsibilitiesDevelop and execute channel plans to drive sales and revenue growthBuild and maintain...


  • Sydney, New South Wales, Australia XM Cyber Full time

    About XM CyberXM Cyber is a pioneering cyber security company that offers a continuous threat and exposure management solution. Our innovative technology enables organizations to efficiently remediate threats and exposures, ensuring the security of their critical assets.Job SummaryWe are seeking an experienced Channel Manager to join our team in Australia...


  • Sydney, New South Wales, Australia XM Cyber Full time

    About XM CyberXM Cyber is a cutting-edge threat and exposure management solution that empowers organizations to efficiently remediate security risks. Our innovative technology bridges the gap between security and IT teams, providing a unified approach to threat management.We are a SAAS-based cyber security vendor with a long-term vision for the industry,...


  • Sydney, New South Wales, Australia XM Cyber Full time

    About the RoleXM Cyber is a leading provider of continuous threat and exposure management solutions. We are seeking an experienced Channel Manager to join our team in ANZ.The successful candidate will be responsible for building and managing a channel of enterprise cyber security solutions. This will involve working closely with our sales teams and channel...


  • Sydney, New South Wales, Australia Hudson Australia Full time

    About the RoleHudson Australia is seeking a skilled Technical Advisor to join their team based at their Camperdown location. This on-site role provides flexible hours to accommodate your academic schedule.Key Responsibilities:Engage professionally and empathetically with clients, addressing their needs through various communication channels.Develop and...


  • Sydney, New South Wales, Australia XM Cyber Full time

    About the RoleXM Cyber is a pioneering threat and exposure management solution that empowers organizations to efficiently remediate vulnerabilities. Our innovative approach transforms the traditional cybersecurity model by fostering collaboration between security and IT teams. We are a SAAS-based cybersecurity vendor backed by a leading European retailer,...


  • Sydney, New South Wales, Australia XM Cyber Full time

    About the RoleXM Cyber is a pioneering cyber security company that has revolutionized the industry with its continuous threat and exposure management solution. We are seeking an experienced and inspirational Channel Manager to join our team and drive the success of our channel community.Key ResponsibilitiesEvangelize the XM Cyber value proposition to channel...


  • Sydney, New South Wales, Australia XM Cyber Full time

    About the RoleXM Cyber is a pioneering cyber security company that has revolutionized the industry with its continuous threat and exposure management solution. We are seeking an experienced and inspirational Channel Manager to join our team and drive the success of our channel community.The ideal candidate will have a strong track record of building and...


  • Sydney, New South Wales, Australia XM Cyber Full time

    About the RoleXM Cyber is a pioneering cyber security company that offers a continuous threat and exposure management solution. We are seeking an experienced Channel Manager to join our team and drive the growth of our channel community in the ANZ region.Key ResponsibilitiesDevelop and execute channel plans to drive sales and revenue growthBuild and maintain...


  • Sydney, New South Wales, Australia XM Cyber Full time

    About the RoleXM Cyber is a pioneering cyber security company that offers a continuous threat and exposure management solution. We are seeking an experienced Channel Manager to join our team and drive the growth of our channel community in the ANZ region.Key ResponsibilitiesDevelop and execute channel plans to drive success and fuel the accelerated growth of...


  • Sydney, New South Wales, Australia University Of New South Wales Full time

    About the RoleWe are seeking a highly skilled Cyber Security Risk Manager to join our team at the University of New South Wales. As a key member of our Cyber Security Governance & Assurance team, you will be responsible for providing strategic leadership in developing and continuously improving our cyber security risk management practices.Key...