Who We Are

In Melbourne, water is essential to our way of life.

As caretakers for Melbourne’s water cycle, we care for water, life and land throughout Melbourne: both its people and its biodiversity.

Each time you drink from the tap, flush a toilet, run through a backyard sprinkler, or kayak down the Yarra, we’re there. Primed and ready, quietly delivering some of the world’s cleanest water for over five million residents and wildlife that call Melbourne home, just as we have for over 130 years.

If you value making it count, diving in with curiosity, and doing what’s right, you're in the right place.

About The Role

Melbourne Water is seeking a detail-oriented Technology Governance, Risk & Compliance professional to take on a full-time, permanent role within our Information Technology team, reporting directly to the Senior Manager, Technology Risk & Compliance.

As the Specialist – Technology GRC, you’ll play a pivotal role in safeguarding Melbourne Water’s digital landscape. You’ll be at the forefront of managing and overseeing cyber security risks across all areas of our technology ecosystem, ensuring our systems remain resilient, secure, and compliant.

Make your mark in a purpose-driven organisation where your expertise protects what matters most.

In this role you will:

• Contribute to the maintenance of the enterprise IT Risk Profile and business disruption risks, ensuring third-party and internal IT risks, controls and mitigation strategies are accurately represented and kept current.
• Manage risk actions and policy/standard exemptions, including documentation, tracking, reporting, and resolution in accordance with governance frameworks.
• Conduct and report on assessments of technology and Cyber Security Controls across IT and OT environments, ensuring effectiveness and compliance with regulatory and security frameworks such as VPDSS, SoCI, NIST CSF, and ACSC Essential 8.
• Govern Disaster Recovery (DR) and Business Continuity Planning (BCP), ensuring alignment with business impact assessments, documented RTO/RPOs, and effective recovery strategies.
• Ensure that disaster recovery stakeholders are periodically made aware of the existence of recovery plans, and understand the structure and use of the plans, and have the skill to complete their assigned tasks under disaster
• Manage DR/BCP capability and maturity reporting, issue tracking, funding requirements, and resolution planning across business and IT stakeholders.

About You

• Extensive experience in technology Governance Risk & Compliance (GRC) roles, or applicable risk and/or audit roles
• Experience in risk management and controls assessment
• Extensive experience in governance and compliance
• Tertiary degree in IT, Audit or Risk discipline desirable
• Security qualifications, accreditations and current certification in CISSP, CISM, CISA, ISO27001 LA and/or CRISC desirable
• Knowledge of NIST and ISO standards, Victorian government legislation and regulatory authorities
• Maturity and judgement necessary to contribute to complex decision making

For more information, please review the attached position description: Specialist Technology Governance Risk and Compliance.pdf

Why Join Us

At Melbourne Water, we care about water and all life that springs from it.

Our people are fuelled by passion, and with safety at the forefront, we have an unwavering sense of purpose, and are on a mission to protect every Melburnian’s way of life, one drop at a time.

We walk the talk when it comes to flexible working – but that’s not all. Our culture of purpose, safety, results, and learning permeates everything we do. We're dedicated to doing what's right, and this commitment extends to the meaningful work we do in a supportive and inclusive culture that encourages you to make the most of your talents.

Our long-standing commitment to Diversity, Inclusion, and Belonging means that Aboriginal and Torres Strait Islander peoples, LGBTIQ+ individuals, people living with disability, mature age and young jobseekers from all cultures can apply with confidence knowing they are safe, affirmed, and celebrated.

If you’re curious, action-orientated, outcomes-focused, and care deeply for public resources, community, and the environment, we'd love to receive an application and learn if you could be a great fit.

How To Apply

Click the 'Apply Now' button below and complete our online application form.

Closing date: Sunday 5th October at 11:55pm AEST