Head of Cyber Risk & Governance

As Head of Cyber Risk & Governance, you will provide strategic leadership across cyber risk management, governance, policy development, compliance oversight, and executive reporting.

Partnering closely with senior leaders across Information & Digital, Risk, Legal, Privacy, Procurement and the broader business, you'll ensure cyber and technology risks are effectively identified, managed, and reported while supporting innovation and digital transformation initiatives.

• Own and lead BaptistCare's enterprise cyber risk management framework, ensuring cyber and technology risks are identified, assessed, treated, monitored, and reported effectively.

• Lead the day-to-day cyber risk governance function, embedding strong risk management practices across the organisation.

• Chair and facilitate the Cyber Risk Committee, driving effective governance, escalation, and oversight of cyber risk matters.

• Partner closely with Executive leaders, the Chief Risk Officer, and business stakeholders to improve cyber risk awareness, accountability, and decision-making.

• Develop, maintain, and continuously improve cyber security policies, standards, and governance frameworks aligned with regulatory requirements and industry best practice.

• Ensure cyber governance frameworks align with relevant legislation, including the Aged Care Act, privacy obligations, and other regulatory requirements.

• Drive a strong cyber risk culture across BaptistCare through education, engagement, and capability-building initiatives.

• Lead enterprise-wide cyber risk assessments, including technology, operational, strategic, and emerging risks.

• Oversee third-party cyber risk management, including supplier assessments, ongoing monitoring, and governance of outsourced technology services.

• Provide strategic oversight of emerging technology risks, including AI-enabled solutions and digital transformation initiatives.

• Deliver high-quality cyber risk reporting, insights, and recommendations to Executive leadership, governance forums, and Board committees.

• Build and lead a high-performing Cyber Risk & Governance team, consisting of specialist cyber governance, third-party risk, and information management professionals.

• Work collaboratively across Information & Digital, Risk, Legal, Privacy, Procurement, and Compliance functions to strengthen enterprise risk management outcomes.

• Support BaptistCare's ongoing transformation journey by ensuring cyber risk considerations are embedded into strategic initiatives and technology investment decisions.

• Extensive leadership experience in Cyber Risk, Governance, GRC, Technology Risk, Operational Risk, or Information Security within a large and complex environment.

• Proven experience designing and implementing enterprise cyber risk management and governance frameworks.

• Strong understanding of regulatory and compliance obligations within highly regulated industries.

• Experience influencing executives, risk committees, and Board stakeholders.

• Demonstrated experience leading third-party risk management and supplier assurance programs.

• Strong knowledge of NIST CSF, ISO 27001, ASD Essential Eight, and contemporary cyber risk practices.

• Experience gained within aged care, health, banking, financial services, or other highly regulated sectors will be highly regarded.

• Professional certifications such as CISM, CRISC, or equivalent cyber risk/governance certifications are highly desirable.

• Ability to translate complex cyber risks into practical business outcomes and drive organisational risk maturity.