Current jobs related to Cyber Security Controls Assurance Manager - Sydney - University of New South Wales


  • Sydney, New South Wales, Australia Skylight Cyber Security Full time

    OverviewSkylight Cyber is a young, transparent, and culture-focused boutique cyber security firm specialising in providing high-end services to enterprises globally. We provide our customers with world class expertise to build and continuously evolve an effective security stack across people, process, and technology.We thrive and are passionate about the...


  • Sydney, New South Wales, Australia Skylight Cyber Security Full time

    OverviewSkylight Cyber is a young, transparent, and culture-focused boutique cyber security firm specialising in providing high-end services to enterprises globally. We provide our customers with world class expertise to build and continuously evolve an effective security stack across people, process, and technology.We thrive and are passionate about the...


  • Sydney, Australia University of New South Wales Full time

    **Job no**: 527462 **Work type**: full time **Location**: Sydney, NSW **Categories**: Information Technology, Analyst, Cyber - Employment Type: fixed term role until Dec 2025 as a Cyber Security Assurance Analyst within Cyber Security, UNSW IT - Starting Salary $110,073 plus generous superannuation - Location: UNSW Kensington Campus (Hybrid Working...


  • Sydney, Australia University of New South Wales Full time

    **Job no**: 529814 **Work type**: Full Time **Location**: Sydney, NSW **Categories**: Information Technology, Cyber - Employment Type: full time continuing role as Head of Cyber Security and Governance - Excellent salary package including superannuation - Based Kensington, Sydney. Hybrid options available **Join Our High-Performing Cyber Security Team at...


  • Sydney, New South Wales, Australia beBeeCybersecurity Full time $123,000 - $160,000

    Cyber Security Assurance and Engineering SpecialistOur organisation is seeking a seasoned Cyber Security Assurance and Engineering professional to join its Operational Technology division in Sydney. This pivotal role will focus on providing expert security assurance and engineering services to businesses, protecting their critical systems and sensitive...


  • Sydney, Australia LGT Crestone Wealth Management Full time

    Min Experience- 5 yearsYour Role Cyber Security Operations - Collaborate with the outsourced security operations center (SOC) - Ensuring advanced threat technologies are configured to vendor specifications, alerts are reviewed and acted upon, and underlying processes and technologies are continuously refined to keep up with evolving risk. - Be a key contact...


  • Sydney, Australia NSW Department of Customer Service Full time

    **Manager, Security Compliance and Assurance, Ongoing opportunity based in Sydney, with flexible & hybrid working options available** **The Department of Customer Service is looking for a Manager Security Compliance and Assurance to join our growing team! **Benefits** - Fantastic ongoing clerk grade 11/12 Opportunity. - Hybrid and flexible working options...


  • Sydney, New South Wales, Australia beBeeCyberSecurity Full time $149,739 - $174,699

    Cyber Security SpecialistJob Summary:This role is responsible for leading the implementation of cyber security strategies and providing expert technical advice to protect government data.Main Responsibilities:Contribute to the development and maintenance of a robust cyber security posture through provision of expert technical guidance and direction.Perform...


  • Sydney, Australia Siemens Full time

    Working in partnership with the NSW Government, the Parklife Metro consortium is working on an exciting new metro rail infrastructure project in Greater Western Sydney. Comprising, Plenary, RATP Dev, Siemens and Webuild, the private sector partners are looking to build their metro rail expertise to deliver this city-shaping project, which will be delivered...


  • Sydney, Australia LGT Crestone Wealth Management Full time

    Min Experience- 10 yearsYour team - Working as a part of the Risk, Legal & Compliance team with overall responsibility to drive all strategic and operational cyber security and IT risk functions. - Working alongside the Head of Technology, senior business and risk executives and project management team within the reporting structure of the Chief Risk...

Cyber Security Controls Assurance Manager

2 weeks ago


Sydney, Australia University of New South Wales Full time

**Job no**: 527959
**Work type**: full time
**Location**: Sydney, NSW
**Categories**: Information Technology, Cyber
- Employment Type: full time continuing role as a Cyber Security Controls Assurance Manager
- Excellent salary package including superannuation
- Location: UNSW Kensington Campus (Hybrid Working Opportunities)

**About UNSW**:
UNSW isn’t like other places you’ve worked. Yes, we’re a large organisation with a diverse and talented community, a community doing extraordinary things. Together, we are driven to be thoughtful, practical, and purposeful in all we do. Taking this combined approach is what makes our work matter. If you want a career where you can thrive, be challenged and do meaningful work, you’re in the right place.

The Cyber Security Controls Assurance Manager is responsible for overseeing and advancing the University’s cyber security controls assurance practices, ensuring that cyber security controls are effective, regularly tested, and continuously improved. Key responsibilities include developing and executing strategies for cyber security controls testing, facilitating the remediation of identified gaps, and delivery of cyber security metrics and reporting to support senior management decision-making The Cyber Security Controls Assurance Manager reports to the Head of Cyber Security Governance & Assurance and has direct reports.

**Accountabilities**:

- Lead the strategic planning, execution, and continuous improvement of cyber security controls assurance testing, including regular controls effectiveness testing and gap assessments.
- Develop and implement a continuous controls assurance testing strategy, with a focus on control monitoring, automation, uplift, and rationalisation.
- Facilitate post-testing assurance by reviewing findings, advising stakeholders, prioritising remediation efforts, and managing closure of actions.
- Monitor, track, and ensure timely closure of findings, risks, and associated actions resulting from controls assurance activities, ensuring alignment with the University’s risk appetite.
- Develop, collect, and continuously improve cyber security metrics and Key Risk Indicators (KRIs)/Key Control Indicators (KCIs) to measure performance and risk exposure.
- Lead the delivery and management of periodic cyber security metrics reporting.
- Present insights, information, and recommendations to leadership and stakeholders to inform decision-making and support organizational objectives, and present at quarterly GRC Community of Practice (CoP) and Developer Security CoP meetings to foster collaboration and knowledge sharing across faculties and divisions.
- Update and maintain the cyber security risk register with findings from testing, assessments, and performance metrics, ensuring that risks are tracked and mitigated.
- Manage audit assurance activities by providing leadership in facilitating the remediation of audit findings, ensuring that identified risks are mitigated in accordance with agreed timelines and corrective actions are successfully implemented.
- Lead the maturity and management of Cloud Security Posture Management (CSPM) tools, including tuning, ongoing monitoring, and remediation activities.
- Oversee crowdsourced security testing / bug bounty programs, ensuring these programs are aligned with security objectives and contribute to continuous improvement in security posture.
- Provide strategic cyber security consulting and advisory services to the Cyber Security Enablement Program and other key initiatives across the University, ensuring alignment with governance and compliance standards.
- Manage and mentor a team, providing guidance, support, and professional development opportunities to ensure high performance and continuous growth.
- Align with and actively demonstrate the Code of Conduct and Values
- Cooperate with all health and safety policies and procedures of the university and take all reasonable care to ensure that your actions or omissions do not impact on the psychosocial or physical health and safety of yourself or others.
- Ensure hazards and risks psychosocial and physical are identified and controlled for tasks, projects, and activities that pose a health and safety risk within your area of responsibility.

**Skills and Experience**:

- Extensive management expertise and supporting experience (7+ years) in cyber security controls assurance, with a proven track record in controls assurance testing, metrics reporting, and audit management.
- Strong experience with cyber security assurance tools such as Checkmarx, Lacework, BugCrowd, and similar platforms.
- Certifications such as CISSP, CISM, CRISC, CEH, or relevant certifications in security assurance and controls testing are highly desirable.
- Strong understanding of cyber security metrics, KRIs/KCIs, and their role in managing and communicating risk.
- Experience in working with risk registers and driving the remediation of risks and audit findings.
- Excellent