Manager, Cyber Security Risk and Assurance

Join Information Technology Services as Manager, Cyber Security Risk and Assurance Operations, where you will help shape a trusted, resilient and customer-focused cyber security environment for The University of Queensland. In this purposeful professional role, you will lead operational cyber security risk and assurance services across a complex university setting, working collaboratively with stakeholders, specialists and third parties to strengthen risk management, assurance processes and strategic decision-making.

Key responsibilities will include:

Deliver customer-facing cyber security risk and assurance services, including risk assessments, third-party risk management, cyber security reporting and advice on security obligations in agreements and contracts.

Develop and communicate plans, reports, insights, policies, standards and guidelines that support cyber security strategy, risk management and assurance outcomes.

Plan and implement complex cyber security risk management activities, including business impact analysis, accreditation, control improvement recommendations and advice on identified risks.

Provide operational direction, coaching and guidance to colleagues, while building effective working relationships and supporting a positive, inclusive team environment.

You are a collaborative and strategic cyber security professional who enjoys working across complex environments to influence positive security outcomes. You combine technical expertise with strong stakeholder engagement skills and are passionate about strengthening organisational resilience through effective risk and assurance practices.

You will bring:

Qualifications and training equivalent to a bachelor’s degree in IT or a related discipline, or an equivalent combination of relevant experience, education and training.

A postgraduate qualification in Cyber Security, a recognised industry certification, or an equivalent combination of relevant experience and education.

Demonstrated experience developing and implementing cyber security strategies, policies and standards within large and complex organisations.