Senior Risk Lead, Cybersecurity at AustralianSuper · Sydney

Lead independent cybersecurity risk oversight, challenge and assurance to strengthen cyber resilience and deliver better outcomes for members.

At AustralianSuper, we truly care about our colleagues. We know work and life are intertwined. That’s why we support the diverse needs of everyone and have policies that enable us all to thrive and be truly flexible. We ensure diversity is celebrated for the opportunity it provides us all to learn and grow and deliver better outcomes for members. We are dedicated to building a high-performance environment underpinned by a strong risk culture, ensuring we deliver the best outcomes for our members. Your New RoleAs a senior member of the Technology Advisory team within Group Risk, you will provide independent Line 2 oversight of cybersecurity risks, controls and resilience activities across the Fund. You will partner with senior technology, cyber and risk stakeholders to review risk exposures, challenge assumptions, assess control effectiveness and provide evidence-based insights to governance forums and executive stakeholders.Key duties include but are not limited to;

• Establish and implement a Line 2 operating model to oversight Line 1 cybersecurity practices, governance rhythms and engagement models.

• Provide independent second line oversight, advice and constructive challenge across cybersecurity and information security activities.

• Assess the Fund’s cybersecurity risk profile, including key risks, control gaps, remediation activities and accepted risks.

• Review and challenge cyber risk assessments, control testing programs, cyber maturity assessments and assurance outcomes.

• Provide oversight of cyber-related incidents, risk reporting, regulatory obligations and third-party security risks.

• Prepare clear, evidence-based reporting for senior management, executive forums, Board committees and regulatory engagement where required.

• Use threat intelligence, audit findings, incident information and control outcomes to develop independent risk insights and recommendations.

• Build trusted relationships across Technology, Cybersecurity, Group Risk, Internal Audit and business stakeholders to support strong risk management outcomes. What You’ll Need

• Hold an accreditation in Risk Management from a recognised body like Risk Management Institute of Australasia (RMIA) or Governance Institute of Australia (GIA), or be willing to obtain one after joining AustralianSuper.

• Demonstrated ability to understand and translate external regulatory requirements to shape business outcomes.

• Tertiary qualifications in technology, cybersecurity, information systems, risk, business, law or a related discipline, or equivalent industry experience.

• Extensive experience in cybersecurity, technology risk, operational risk, cyber assurance, resilience, internal audit or related disciplines.

• Strong understanding of cybersecurity controls, cyber defence, security operations, vulnerability management, cyber incident response and cyber resilience practices.

• Experience operating in a governance, risk advisory, assurance or independent challenge capacity, ideally within a regulated or complex environment.

• Knowledge of relevant frameworks and regulatory expectations including CPS 234, CPS 230, NIST Cybersecurity Framework, Essential Eight and third-party risk management practices.

• Exceptional stakeholder management skills and the ability to influence senior technology, risk, cyber and business leaders.

Life at AustralianSuper AustralianSuper is committed to colleague development, and we support our people with ongoing learning, coaching and training, as well as career opportunities across our expanding global organisation. We offer generous leave entitlements and promote a blended working environment in which all roles can flex, and we’re happy to discuss what this looks like for you. We cultivate a workplace that champions safety, respect, inclusiveness and diversity. We are committed to supporting our diverse workforce in a way that is inclusive and embraces diversity in all its forms. If you require any reasonable adjustments to the recruitment process or the role, please let our recruitment team know. What’s Next Apply now, if you share our values of Energy, Integrity, Generosity of Spirit and Excellent Outcomes and would like the opportunity to work in a challenging, growing and rapidly evolving team to deliver outstanding results.AustralianSuper uses AI to review resumes and conduct initial phone interviews. This involves processing your resume, cover letter, and voice recording in Australia and the USA to help assess your suitability for the applied role. When invited to an AI phone screening, you may opt for a traditional phone screening instead. For information on how we handle your personal data, please refer to our Candidate Privacy Policy.Candidate Privacy Policy: https://www.australiansuper.com/careers/candidate-privacy-noticeAgencies please note: this vacancy is being managed directly by AustralianSuper’s Talent Acquisition team. We will contact our preferred agency partners should we require additional support. Thank you.