We are seeking a skilled Senior Cyber Governance Officer to lead governance, risk, and compliance activities across a growing enterprise security function. This is an exciting opportunity to shape security posture, strengthen compliance frameworks, and work directly with senior leadership to support both internal operations and client-facing services.

About the Role
As a senior member of the governance team, you will drive the development and maintenance of security policies, frameworks, and risk management practices. You will play a central role in implementing ISO 27001 and ISM-aligned controls, supporting audits, and ensuring the organisation meets regulatory and contractual obligations.
Key Responsibilities

• Develop, review, and maintain security policies, standards, and procedures
• Lead ongoing management of the ISMS, aligned to ISO 27001 and ISM
• Facilitate enterprise risk identification, assessment, and treatment activities
• Maintain risk registers and oversee third-party/vendor risk assessments
• Support ISO 27001 certification and IRAP assessments
• Ensure compliance with obligations such as SOCI and the Privacy Act
• Monitor and report on compliance metrics, risks, and corrective actions
• Contribute to incident response planning, testing, and post-incident reviews
• Champion security awareness and a strong compliance culture across the business

What We’re Looking For

• 5+ years’ experience in governance, risk, and compliance roles within IT, cybersecurity, or MSP environments
• Strong knowledge of ISO/IEC 27001 and the ISM
• Excellent communication, documentation, and analytical skills
• Relevant certifications such as CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent
• Bachelor’s degree in IT, Cybersecurity, Risk Management, or related field

Why Join Us?

• Competitive salary of $150k base
• Flexible work arrangements to support work-life balance
• Opportunity to work closely with senior leadership on enterprise-wide security initiatives
• Be part of a collaborative and forward-thinking security team

Please Note: Due to the high volume of applications, only shortlisted candidates will be contacted.