Cyber Security Assurance Lead

UNSW Sydney

Sydney, NSWPosted 7 days agoDiscoveredMatch locked

HybridFull Time5+ years expCyber

Apply

About the role

Full-time continuing role within UNSW IT, Cyber Directorate - Cyber Security Assurance Lead

Starting Salary $153,933 plus generous superannuation and leave loading

Kensington, Sydney location, 2-3 days in the office, Hybrid working

About UNSW

UNSW isn't like other places you've worked. Yes, we're a large organisation with a diverse and talented community; a community doing extraordinary things. Together, we are driven to be thoughtful, practical, and purposeful in all we do. Taking this combined approach is what makes our work matter. It's the reason we're one of the top 20 universities in the world (QS top 20) and a member of Australia's prestigious Group of Eight. If you want a career where you can thrive, be challenged and do meaningful work, you're in the right place. The Cyber Security Assurance Lead - leads the operational delivery and reporting of the Cyber Security Assurance Services within a fit-for-purpose and adaptive Cyber Security Risk Management framework. Responsible for the controls assurance testing, metrics reporting, and the provision of cyber security subject matter expertise. The Cyber Security Assurance Lead reports to the Cyber Security Controls Assurance Manager and has no direct reports.

Accountabilities

Conduct regular review of cyber security controls across IT systems, applications, and networks and perform testing to validate the design and operating effectiveness of controls, identify control gaps, vulnerabilities, and risks, and provide actionable insights and recommendations for remediation.

Collaborate with stakeholders to develop remediation plans, track progress toward remediation, and work with business owners, control owners and operators to resolve and close findings/issues.

Update the cyber risk register with risks from assurance reviews.

Prepare detailed audit reports, including findings, risk impacts, and recommendations for senior management and stakeholders, and communicate and report on control testing outcomes and findings.

Develop and maintain dashboards and metrics to monitor the implementation and effectiveness of security controls, and implement, operationally manage and continually improve the quarterly metrics program.

Report monthly to the CISO and Deputy CISO on the progress of cyber security assurance.

Demonstrate leadership in managing and improving UNSW's assurance capabilities, including improvements to control assurance methodologies, testing procedures, and reporting processes, (incl. Automation).

Support the independent audit of cyber security controls on behalf of the University, including statutory audits completed by the Audit Office of NSW.

Continually stay up to date and aware of legal, regulatory compliance and contractual obligations that are relevant to the University's management of cyber security risk.

Undertake other duties appropriately and in line with this position as requested by the Cyber Security Controls Assurance Manager and the Head of Cyber Security Governance & Assurance.

Align with and actively demonstrate the Code of Conduct and Values.

Cooperate with all health and safety policies and procedures of the university and take all reasonable care to ensure that your actions or omissions do not impact the psychosocial or physical health and safety of yourself or others.

Ensure hazards and risks of psychosocial and physical are identified and controlled for tasks, projects, and activities that pose a health and safety risk within your area of responsibility.

Who you are

*5+ years of IT security experience, ideally with global consulting firms, large technology companies, government agencies, or defence consultancies. *Thorough understanding of penetration testing, vulnerability management, application security testing, and source code review. *Experience in a first-line assurance role, assessing controls for design and operating effectiveness; experience in security controls testing is advantageous but not mandatory. *Strong analytical skills with the ability to interpret data and provide actionable insights for management and problem-solving skills to address challenges effectively. *Strong fundamentals in Cyber Security Governance, Risk, and Compliance (GRC) principles and practices. *Comprehensive knowledge of industry standards and frameworks, such as ISO 27001, NIST 800 53, CSA, Essential 8, PCI DSS, COBIT 5, and MITRE ATT&CK. *Bachelor's degree in Cyber Security, Information Technology, or a related field. *Relevant industry certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Auditor (highly desirable). *Strong interpersonal, communication, and negotiation skills, with the ability to build effective relationships and influence stakeholders at all organizational levels. *Capability to present complex technical information in a concise, clear, and credible manner for diverse audiences. *Demonstrated high level of personal motivation, resilience, and ability to work effectively individually or in teams. *An understanding of and commitment to UNSW's aims, objectives and values in action, together with relevant policies and guidelines. *Knowledge of health & safety (psychosocial and physical) responsibilities and commitment to attending relevant health and safety training.

Benefits and Culture

Flexible Working Options (work from home, flexible hours etc)

Career development opportunities

17% Superannuation contributions and additional leave loading payments

Additional 3 days of leave over Christmas period

Discounts and entitlements (retail, education, fitness)

For further details on the benefits, please visit  https://www.jobs.unsw.edu.au/lifestyle-benefits

To apply:   Please submit your CV, Cover Letter and responses addressing the required Who you are criteria.

Please note: Sponsorship is not available for this role; valid Australian working rights are required on application .

Pre-Employment Checks As part of our recruitment process candidates may be required to undergo pre-employment screening, which may include reference checks, qualification verification, right-to-work verification, and criminal history screening where relevant to the role.

Contact:  Jen MacLachlan - Talent Acquisition Partner- e:  j.maclachlan@unsw.edu.au

Please apply through the application portal as we do not accept direct applications to the email above.

Applications close : Thursday 22 nd of October at 11.30pm

UNSW is committed to equity diversity and inclusion. Applications from women, people of culturally and linguistically diverse backgrounds, those living with disabilities, members of the LGBTIQ+ community; and people of Aboriginal and Torres Strait Islander descent, are encouraged. UNSW provides workplace adjustments for people with disability, and access to flexible work options for eligible staff.

The University reserves the right not to proceed with any appointment.

Skills

cybersecurityapplication-securitycissppenetration-testing

Who can apply

The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.

Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.