24 Chief Information Security Officer jobs in Australia

Company Description

Turner & Townsend is a global professional services company with over 22,000 people in more than 60 countries.

Working with our clients across real estate, infrastructure, energy and natural resources, we transform together delivering outcomes that improve people’s lives. Working in partnership makes it possible to deliver the world’s most impactful projects and programmes as we turn challenge into opportunity and complexity into success.

Our capabilities include programme, project, cost, asset and commercial management, controls and performance, procurement and supply chain, net zero and digital solutions.

We are majority-owned by CBRE Group, Inc., the world’s largest commercial real estate services and investment firm, with our partners holding a significant minority interest. Turner & Townsend and CBRE work together to provide clients with the premier programme, project and cost management offering in markets around the world.

Please visit our website: />
Job Description

We are looking for an experience Risk Management Lead to head the risk function within the Project Controls team on a critical infrastructure program as part of a nationally signficant endeavour. This role is responsible for leading quantitative risk assessments (QRA), scenario modelling, and ensuring the integrity of all risk inputs and outputs.

As The Risk Management Lead, You Will

Lead the Risk Team and coordinate with precinct teams to collate and validate QRA inputs.Conduct QRAs to inform program contingency levels and monitor risk exposure.Perform sensitivity and scenario modelling to support strategic decision making.Produce risk dashboards, reports, and presentations to communicate QRA outcomes.Model cash flows and escalation impacts over time.Analyse QRA results to identify trends, variations, and areas of concern.Ensure compliance with corporate risk management standards and provide expert advice to the PCON Director and boarder project team.

Qualifications

To be successful in your application, you will need:

Australian Citizenship and the ability to obtain (or currently hold) an Australian Security Clearance.At least 4 years of experience in risk management, with demonstrated capability at a senior level.Strong quantitative and commercial acumen, with a high level of accuracy.Proficiency in risk tools such as Active Risk Manager, Cura, @Risk, Acumen Fuse, Safran, Primavera Risk Analysis.Experience with data visualisation tools such as Power BI, Tableau, or similar.

We're Looking For People Who Are

Comfortable working as part of a geographically dispersed team, including remote collaboration with client and site teams.Friendly, approachable, and relationship focused.Strong communicators who can clearly present complex data and insights.

Additional Information

Our inspired people share our vision and mission. We provide a great place to work, where each person has the opportunity and voice to affect change.

We want our people to succeed both in work and life. To support this we promote a healthy, productive and flexible working environment that respects work-life balance.

Turner & Townsend is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees and actively encourage applications from all sectors of the community.

Please find out more about us at />
#NH1

Join our social media conversations for more information about Turner & Townsend and our exciting future projects:

Twitter

Instagram

LinkedIn

It is strictly against Turner & Townsend policy for candidates to pay any fee in relation to our recruitment process. No recruitment agency working with Turner & Townsend will ask candidates to pay a fee at any time.

Any unsolicited resumes/CVs submitted through our website or to Turner & Townsend personal e-mail accounts, are considered property of Turner & Townsend and are not subject to payment of agency fees. In order to be an authorised Recruitment Agency/Search Firm for Turner & Townsend, there must be a formal written agreement in place and the agency must be invited, by the Recruitment Team, to submit candidates for review.

Be Part of Our Next Chapter

For over almost 60 years, our solutions have enabled impactful connections between some of the world’s leading brands and their customers. And while we’ve already done a lot of work we’re proud of, we’re just getting started!

We’re a global technology company focused on creating dynamic, smart, personalised and engaging customer experiences powered by our range of digital hardware, our proprietary content management system and our industry leading signage solutions. (For example: If you’ve ordered in-store or in the drive-thru at McDonald’s somewhere in the world in the last few years, chances are you’ve interacted with our digital solutions.) We work in over 50 global markets and have 9 offices around the world, with a global headquarters proudly located in our founding home of Sydney, Australia.

Coates Group has the values of a family-owned business and the innovative spirit of a start-up, both which fuel our purpose – Creating Connections. Empowering Partnerships. Always Evolving. Through hard work, dedication and creativity, we’ve become industry leaders who have won awards and set records while remaining focused on continual growth and evolution. We are a 2x Australia Good Design Award winner and successfully completed the largest hardware deployment in Quick Service Restaurant history.

We are curious, charismatic, authentic and we value and leverage the diversity of our crew. We are imaginers, kindness enthusiasts, experts, creators, thinkers, challengers, collaborators and over-achievers. And together, as a Crew, we are revolutionizing the way the world’s leading brands leverage technology to drive the best customer experiences.

As a key member of the Risk Management team your role will be to ensure the protection of Coates assets from potential threats. This role will suit an individual with a legal, accounting or internal audit background.

The responsibilities of the Risk Management Specialist will be to identify, assess, and mitigate risks that could potentially impact an organization’s operations and reputation. The Risk Management Specialist will design, implement and manage the policies, procedures and monitoring to ensure potential threats are mitigated and managed.

Role Responsibilities

• Develop and implement risk management frameworks and processes to identify potential risks across various aspects of the organization, including financial, operational, strategic, security and compliance risks.

• Evaluate the likelihood and impact of identified risks.

• Develop and recommend strategies to manage or mitigate identified risks.

• Design, implement and maintain risk management policies and procedures that are in compliance with legal and regulatory requirements. Especially security policies, standards, procedures, and guidelines to ensure the organization's information assets are adequately protected (including any 3rd parties that access the organizations systems).

• Monitor the effectiveness of risk management strategies including conducting regular risk audits and compliance checks to uncover vulnerabilities, including security audits to ensure compliance with ISO 27001.

• Develop and maintaining crisis and incident response plans, leading incident response efforts, conducting post-incident analysis to evaluate the response and improve future risk management strategies. Continuously monitor risk factors and emerging threats.

• Ensure that there is an effective Contract and Regulatory compliance monitoring process in place to ensure that contractual commitments and external regulatory requirements are complied with.

• Ensure that there is an effective security Incident Monitoring process in place to monitor security events and alerts to detect and respond to potential security threats in real-time.

• Prepare and present risk management reports to senior management and the board of directors.

Role Requirements

• Bachelor’s degree in Risk Management, Finance, Business Administration, or a related field. A master’s degree or professional certifications (e.g., Certified Risk Management Professional - CRMP, Certified Risk Manager – CRM, CISSP, CISM, CISA) and understanding of ISO 27001, ITIL, CobiT are advantageous.

• Proven experience in risk management, including IT security or a related field. Experience in a managerial role is often preferred.

• Proficiency in risk assessment methodologies

• A solid understanding of cybersecurity principles, practices, and technologies and related security frameworks, standards and regulations (e.g. NIST, ISO, GDPR).

• Excellent analytical and problem-solving abilities to assess complex risk scenarios, make informed decisions and ability to develop creative solutions to mitigate risks and handle crises

• Excellent verbal and written communication skills to convey complex risk-related and technical concepts to non-technical stakeholders.

• Experience in project management and the ability to lead cross-functional teams in implementing risk management initiatives and projects.

• Up-to-date knowledge of emerging cybersecurity threats, trends, and best practices, and a commitment to continuous learning and professional development.

• Strong ethics and integrity, with a commitment to maintaining the confidentiality, integrity, and availability of sensitive information and systems.

About Coates

We are industry leaders who have won awards and set records. We are a 2x Australia Good Design Award winner and we successfully completed the largest hardware deployment in Quick Service Restaurant history.

We are industry leaders who have won awards and set records. We are a 2x Australia Good Design Award winner and we successfully completed the largest hardware deployment in Quick Service Restaurant history.

We are led by a forward-thinking CEO who has demonstrated a true passion for people and making Coates a place where people genuinely enjoy working. Our growth plans enable a focus on providing rapid career advancement opportunities for our talent.

Together, we are creators, allowing us to make our purpose a reality – to create immersive brand experiences for everyone.

Join a Crew that Cares

Be part of a global team of talented, ambitious, creative people that value integrity, individuality and inclusivity. (Ask us about our Equality + Empowerment Initiatives).

The benefits include an annual market competitive bonus program and our “Thrive Program” which includes a suite of flexible work options because we’re strong believers that you should never miss an important life or work moment. Thrive also provides dedicated time to prioritize our health and wellbeing (think virtual Yoga or meditation sessions), a Global Wellness paid day off to recharge as well as a “Give Back Day” to allow our Crew an opportunity to make an impact in the community.

Be inspired To Be More

We skip the red tape and aim to always stay nimble. We’re proud of where we’ve been and are energized by where we’re going. We encourage ideas and perspectives because we know the more we have, the better we are. We work hard but have fun along the way. We push the boundaries but keep it real and authentic. We believe in the values that got us here are the ones that will continue to lead us forward. We are excited by what we’ve accomplished, but know the best is yet to come.

Coates Group is an Equal Opportunity Employer and does not discriminate on the basis of race, color, creed, national or ethnic origin, gender, religion, disability, age, political affiliation or belief, disabled veteran, veteran of the Vietnam Era, or citizenship status (except in those special circumstances permitted or mandated by law).

Title:
System Engineer - Risk Management
Belong. Connect. Grow. with KBR!
KBR's National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country's most critical role - protecting our national security.
Why Join Us?
+ Innovative Projects: KBR's work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.
+ Collaborative Environment: Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.
+ Impactful Work: Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.
This is a contingent position based upon contract award
Who We AreKBR Government Solutions delivers full life cycle professional and technical solutions that improve operational readiness and drive innovation. Our solutions help ensure mission success on land, air, sea, space and cyberspace for the Department of Defense, Intelligence Community, NASA and other federal agencies. KBR's areas of expertise include engineering, logistics, operations, science, program management, mission IT and cybersecurity. KBR strives to create a safer, more secure and sustainable world by bringing together the best and brightest to deliver technologies and solutions that help our customers accomplish their most critical missions and objectives.
The Mission AheadThis role is with KBR's Government Solutions U.S. division. At KBR Government Solutions, we don't just envision a world that's safer, more secure, and sustainable - we create it. Our legacy of delivering advanced full life cycle professional and technical solutions is matched only by our commitment to operational readiness and innovation. As stewards of critical missions for the Department of Defense, Intelligence Community, NASA, and other key federal entities, we excel in engineering, logistics, operations, science, program management, mission IT, and cybersecurity. United in our quest for excellence, KBR stands at the vanguard, ready to transform possibilities into impactful realities for a better tomorrow.
Who You AreYou're a strategic and detail-oriented Systems Engineer: Risk Manager with a strong background in identifying, assessing, and mitigating risks within complex systems and projects. Your expertise in risk management, system architecture, and engineering principles allows you to develop robust strategies that minimize potential threats and ensure system resilience. You excel at balancing technical requirements with risk mitigation strategies, ensuring that projects are both secure and successful.
At KBR, you bring a proactive mindset and a strong ability to anticipate and manage risks, safeguarding critical systems and operations. Known for your analytical thinking, problem-solving skills, and ability to collaborate across teams, you thrive in environments where your strategic input ensures the continued success and stability of mission-critical systems.
What You'll DoIn the role of Systems Engineer: Risk Manager, your duties will include:
+ Lead risk assessments and develop risk management plans for systems and projects across various domains.
+ Identify potential risks, threats, and vulnerabilities within system designs and operations.
+ Collaborate with engineering teams to create and implement risk mitigation strategies and solutions.
+ Conduct regular risk reviews and ensure compliance with safety, security, and regulatory standards.
+ Use data analysis tools to evaluate system performance and identify areas for improvement.
+ Communicate risk assessments and mitigation plans to stakeholders and senior leadership.
+ Assist in the development of system architectures and designs with a focus on minimizing risks.
+ Support the creation of contingency plans and disaster recovery procedures to address critical system failures.
+ Stay up to date with industry best practices, standards, and regulatory requirements related to risk management.
Requirements:
+ Must be a US or Australian citizen
+ Must Possess an active US Top Secret/SCI w/ Polygraph or AUS PV Clearance.
+ Bachelor's degree in Systems Engineering, Risk Management, or a related field.
+ Must have 7 years of related experience supporting large systems and sub-systems.
+ Experience in Model Based Systems Engineering (MBSE)
+ Proven experience in systems engineering and risk management.
+ Strong understanding of risk analysis tools and techniques.
+ Expertise in system architecture and lifecycle management.
+ Ability to assess and mitigate technical, operational, and financial risks.
+ Excellent communication and interpersonal skills, with the ability to present technical information to non-technical stakeholders.
+ Detail-oriented with strong analytical and problem-solving skills.
+ Ability to work collaboratively with cross-functional teams and senior leadership.
This role will be located in Alice Springs. This position is expected to be onsite 100%.
#SF
Belong, Connect and Grow at KBRAt KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team's philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver - Together.
KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

**Do you want your voice heard and your actions to count?**
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world's leading financial groups. Across the globe, we're 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.
With a vision to be the world's most trusted financial group, it's part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
**About the role:**
This role will support the delivery of the Operational Risk Management Framework (ORMF) including:
+ Risk and Control Self-Inspection (RCSA)
+ Issue Management
+ Incident Management
+ Controls Assurance (CA)
+ The banks Self-Inspection regime
+ Associated internal and regulatory reporting
In addition, this role provides support to the Chief Risk Officer (CRO) and wider Risk Management team in the delivery of the risk management framework to the Oceania branch.
**What you'll be doing:**
+ Ensure that risk is appropriately managed and that processes meet applicable risk management standards and/or prudential guidelines.
+ Ensure adequate internal controls are in place to comply with all bank rules, policies and procedures and relevant regulatory prudential standards and requirements for Australia and New Zealand.
+ Continuous drive to improve and strengthen the organisation's operational risk management framework and assist in the enhancement of the ORMF to ensure it keep pace with regulatory expectations in Australia and New Zealand.
+ Manage periodic attestation processes such as ensuring all risk events have been captured, policies and procedures remain up to date and business heads understand the risk profiles of their business.
+ Partner with the business and support functions to provide trusted advice on risk management practices and the development of an effective and efficient risk and control framework.
+ Develop and deliver training and workshops to refresh risk management skills and competencies and educate staff in the in the Oceania business as required.
+ Assist in the tracking and timely resolution of risk events and associated counters measures.
+ Work with the business and support functions to ensure that the countermeasures are fit for purpose and that the controls are well designed and will mitigate identified risks.
+ Preparation of Risk Management Committee agendas and minutes.
+ General administrative duties on behalf of the CRO and Risk Management Team (inc. diary management, arranging travel, filing and archiving.
**What we are looking for:**
This is a fantastic opportunity for someone with a genuine interest and drive to learn about risk management. We will provide you with the knowledge and training to get involved across a broad range of risk management activities.
Ideally you will have 1 years' experience working in an operational risk, enterprise risk or audit function in financial services, with exposure to APRA & RBNZ (or another banking regulatory agency) regulations. However, we will also give consideration for recent graduates (in a related discipline), with a good understanding of operational risk management best practice and a grounding in the Three Lines of Defence principals of risk management.
Outstanding administration skills including use of Word, Excel and PowerPoint are essential.
You will be highly organised and efficient, able to multitask and work autonomously and proactively. Strong attention to detail, accuracy and time management skills are essential, as well as a personable and professional manner.
**What we offer you:**
We offer you a role in one of the largest banks of the world, in a growing and international environment. You'll have various opportunities to develop yourself and we will support you with that by offering training and development possibilities to further your career.
Mitsubishi UFJ Financial Group (MUFG) is an equal opportunity employer. We view our employees as our key assets as they are fundamental to our long-term growth and success. MUFG is committed to hiring based on merit and organsational fit, regardless of race, religion or gender.
At MUFG, our colleagues are our greatest assets. Our Culture Principles provide a roadmap for how each of our colleagues must think and act to become more client-obsessed, inclusive and innovative. They reflect who we are, who we want to be and what we expect from one another. We are excited to see you take the next step in exploring a career with us and encourage you to spend more time reviewing them!
**Our Culture Principles**
+ Client Centric
+ People Focused
+ Listen Up. Speak Up.
+ Innovate & Simplify
+ Own & Execute

**Our Purpose**
_Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential._
**Title and Summary**
Manager, Technology Risk Management
Overview
The Mastercard Technology Regulatory Relations & Market Compliance Team is looking for a Manager (Lead) Technology Risk Analyst to be part of the controls' assurance program supporting various requirements to meet customer and regulatory obligations for the related region. The focus of the role would be around providing compliance support, monitoring, and reporting of the on-going operating effectiveness of Mastercard's internal control environment while ensuring compliance with regulatory requirements, internal policies and industry standards.
Mastercard is committed to balancing innovation while protecting the internal control posture. The team assesses internal controls to proactively identify risks, define remediation actions and track remediation efforts. We are looking for someone to join our team and help us meet these compliance goals. This person will be a technically savvy person who likes to solve issues and drive outcomes.
The ideal candidate will have the ability to think and act both strategically and tactically while ensuring that the corporation remains compliant with required security, technology, and financial standards, as well as industry best practices.
Job Responsibilities
- Act as an advisory, a focal point for security and compliance-related activities and responsibilities that includes implementation of ISO 27001 standards within the organization.
- Identify and evaluate technology risks and any related potential security weaknesses through risk and control assessments across systems, application, infrastructure and processes in accordance with industry standards
- Establish and track remediation internally and externally through to resolution whilst improving design and operational effectiveness of controls.
- Collaborate with key internal stakeholders from Technology and Business to ensure required deliverables are accurate, complete, timely and within the level of expectations required.
- Proactive in providing suggestions in process related improvements and constantly be informed of evolving regulatory and cybersecurity related requirements
- Proficient in providing risk insights to the leadership team through risk dashboards for key initiatives, plans and audit tracking of the current processes as per management requirements.
About You:
- Experience in working with digital and technology functions ideally in a technology and/or cybersecurity related compliance role including managing complex technology / cyber security related audit / regulatory projects.
- Strong understanding of IT general controls and technology and/or cybersecurity risk management frameworks such as NIST, ISO 27001/27002, GDPR, data privacy related regulations,
- Bachelor's degree or equivalent combination of education and experience/Bachelor's degree in Computer Science, Information Technology or related field preferred
- Possess one or more professional certifications (i.e. CISA or CISSPISO 27001 LEAD AUDITOR /Implementer (Desirable)
- Demonstrate proficiency in information security domains technical background in IT processes and systems related risks.
- Self driven with strong organizational and time management skills
- Experience in managing complex projects related to information security
**Corporate Security Responsibility**
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
+ Abide by Mastercard's security policies and practices;
+ Ensure the confidentiality and integrity of the information being accessed;
+ Report any suspected information security violation or breach, and
+ Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.

Our Technology Risk Management team are leveraging AI and automation solutions to enhance Technology Operational Risk Management processes and conduct advanced risk analysis. As part of this critical function, you will play a pivotal role in reshaping how we identify, assess, and mitigate technology risks, ensuring Macquarie continues to operate as a trusted and resilient global financial services leader.

At Macquarie, our advantage is bringing together diverse people and empowering them to shape all kinds of possibilities. We are a global financial services group operating in 31 markets and with 56 years of unbroken profitability. You’ll be part of a friendly and supportive team where everyone - no matter what role - contributes ideas and drives outcomes.

What role will you play?

As an AI Engineer you will develop and deploy innovative AI solutions that enhance technology risk management at Macquarie. You will design scalable platforms and applications to improve how we monitor, assess, and respond to operational risks, collaborating with engineers, risk analysts, and data specialists to integrate AI models into our ecosystem. Your role will involve leveraging large language models (LLMs) and generative AI to provide deeper risk insights, building tools to monitor AI systems, and ensuring compliance with governance standards. You will also establish best practices for AI adoption, aligning with Macquarie’s broader technology and risk strategies to drive innovation in risk management.

What You Offer

Technical expertise in Python, with hands-on experience in AI frameworks such as LangChain, OpenAI API, Anthropic Claude, Amazon Bedrock, or Google Vertex Proven experience deploying generative AI applications in production environments, including prompt engineering, model integration, and system monitoring A platform engineering mindset, focusing on building reusable AI infrastructure, model-serving systems, and developer tools Knowledge of emerging AI protocols, such as Model Context Protocol and Agent-to-Agent communication protocols Strong engineering skills, including testing strategies for AI systems, version control, and adherence to quality practices Experience with cloud platforms (AWS preferred) and AI services (e.g., Bedrock, SageMaker, OpenAI integrations), with an emphasis on cost optimization A background in full-stack development, enabling end-to-end system design and implementation A passion for leveraging AI to solve complex challenges and a commitment to driving innovation in operational processes.

We love hearing from anyone inspired to build a better future with us, if you're excited about the role or working at Macquarie we encourage you to apply.

What We Offer

Benefits

At Macquarie, you’re empowered to shape a career that’s rewarding in all the ways that matter most to you. Macquarie employees can access a wide range of benefits which, depending on employment type, include:

1 wellbeing leave day per yearUp to 5 additional service bonus leave days per yearUp to 20 weeks’ paid parental leave for primary caregivers along with 12 days of transition leave upon return to work, and 6 weeks’ paid leave for non-primary caregivers2 days of paid volunteer leave and donation matchingUp to 12 months’ gender affirmation leave, including 6 weeks’ paid leaveAccess to Employee Assistance Program and wellbeing benefits including skin and health checks, and flu vaccinationsAccess to a wide range of salary packaging optionsAccess to a wide range of learning and development opportunities, including reimbursement for professional membership or subscriptionHybrid and flexible working arrangements, dependent on roleReimbursement for work from home equipment

About Corporate Operations Group

In our Corporate Operations Group, you will work at the heart of Macquarie to deliver for our people, businesses, and their customers. We’re a global, collaborative team with deep expertise in technology, data, digital, market operations, corporate real estate, business resilience, procurement and global security.

Our commitment to diversity, equity and inclusion

We are committed to fostering a diverse, equitable and inclusive workplace. We encourage people from all backgrounds to apply and welcome all identities, including race, ethnicity, cultural identity, nationality, gender (including gender identity or expression), age, sexual orientation, marital or partnership status, parental, caregiving or family status, family and domestic violence status, neurodiversity, religion or belief, disability, or socio-economic background. We welcome further discussions on how you can feel included and belong at Macquarie as you progress through our recruitment process. To learn more, contact our team by clicking here.

Our aim is to provide reasonable adjustments to individuals who may need support during the recruitment process and through working arrangements. If you require additional assistance, please let us know in the application process.

Company Description

Join us in shaping the future of the insurance industry, driven by innovation and a 150-year legacy of protecting peopleWork alongside diverse, passionate colleagues and leaders who inspire, support, and value your contributionsEnjoy benefits such as discounted insurance, health and well-being programs, and a range of employee benefits to support your lifestyle

Welcome to TAL. As a leading life insurer, we’ve been protecting Australians for over 150 years. Backed by Dai-ichi Life, we're driven by big ambitions and empower to create better products and services.

Together with our Partners, we’re helping millions of Australians live a life filled with choices, options, and freedoms. See the direct impact you make delivering support and financial security with care and expertise. Grow beyond expectations with diverse roles, global connections, and exclusive learning opportunities.

Work with passionate, bright and capable colleagues. Feel inspired by supportive leaders. Collaborate with heart, where flexibility, wellbeing and inclusivity is valued. Together, we're reimagining insurance.

So, bring a curious mind and an ambition to help us become the progressive, digitally enabled leading insurer.

Job Description

The Senior Manager, Technology Third Party Risk Management will be part of the Strategy and Planning Team function within the Technology Business Unit and will lead the execution of Technology Vendor Management strategy as well as and leading a team of platform coordinators and analyst.

In This Role You Will

Lead centralised sourcing for Technology across new initiatives, renewals and transformations by partnering with the Enterprise Sourcing Team and relevant stakeholders across Technology Business Unit.Support Business owner in negotiating commercial for Technology along with the Enterprise Sourcing Team to deliver the planned outcomes.Initiate renegotiations of existing agreements with the vendors to drive increased value and benefits for TALAnalyse the software license usage and consumption to identify opportunities for optimisation, cost reduction, or reallocation to higher-value areasUplift the Tech Vendor Relationship Management and Governance framework to support delivery and operations, including vendor performance and service improvementsLead the Vendor Tech & Cyber risk assessments along with the Line 1 Tech & Cyber Risk TeamManage a team of Platform Coordinators, supporting them to carry out platform support activities such as resource tracking/onboarding/offboarding, operational compliance support, end to contract management and financial management activities such as invoicing, receipt accruals and reconciliation

Qualifications

Experience in preparing a negotiation strategy, including setting clear goals and understanding risk limitations and delivering desired outcomesAbility to manage complex technical procurements, including hardware, software, and services, is crucialStrong communication skills for engaging various stakeholders, including influencing and negotiating with vendors and stakeholders to achieve desired outcomes and deliver non-negotiablesAbility to perform cost analysis to evaluate whether a quoted price is fair and reasonable, including assessing the cost of materials and identifying non-value-added costs to reduce overheadAbility to lead and motivate both direct and indirect team members, and manage a developing team

Additional Information

TAL is one of Australia’s leading life insurers, committed to inclusion, and supporting the career growth of our diverse workforce. We’re proud to be: 

An Inclusive Employer – Recognised as Employer of Choice for Gender Equality by the Workplace Gender Equality Agency and Bronze Tier Status within the Australian Workplace Equality Index  Diversity Champions – Member of Diversity Council Australia, Australian Disability Network, Pride in Diversity and Champions of Change  Reconciliation Advocates – Read our Innovate Reconciliation Action Plan. We welcome applications from people with diverse experiences, perspectives and backgrounds including Aboriginal and Torres Strait Islander people, caregivers, individuals living with disabilities, people from culturally diverse backgrounds and the LGBTIQ+ community.  Need adjustments during the recruitment process? Let our team know by getting in touch with us here.—we’re here to support you.

You’re always accountable for your actions. You never give up. You strive to find the best outcomes for customers and partners. And you value working together to find the best solutions for problems.  

As part of the recruitment process, there are several checks which may be conducted to demonstrate your eligibility for a role at TAL including Criminal History, Bankruptcy, Entitlement to Work, Regulatory and Reference Checks. 

  

Everyone at TAL has a responsibility to do the right thing and is accountable for the way they conduct themselves. Our expectations are that you follow the principles set out in our Code of Conduct when you come to work every day. Risk management is everyone’s responsibility.

If you are already a TAL employee please apply via the SmartRecruiters button in Workday and navigate to the Employee Portal. This is important to ensure that your application is recorded accurately.

About the Role
Our client is a national organisation investing in both cyber resilience and infrastructure modernisation.

This is a hybrid role where you’ll spend part of your week embedded in ISO/NIST compliance, security operations, and vendor management, while also rolling up your sleeves across Azure cloud and endpoint environments. At the same time, you’ll provide forward-looking insights to help shape the organisation’s security and infrastructure strategy, leveraging your experience on what ‘good’ looks like.

You’ll manage a small team of 1 x Network Engineer and 1 x Cloud Engineer, plus mentor a junior EUC/SecOps resource one day per week.

Broader IT sits at around 12 people, with this role reporting into the Executive GM, Digital.

It’s a hands-on role that’s an exciting mix of operational leadership, project delivery, and strategic influence, with enterprise visibility and the chance to make a tangible impact.

Key Responsibilities

• Hands-On Security & ISO
• Actively drive ISO 27001 compliance and maturity uplift towards NIST standards
• Conduct audits, risk assessments, and governance reviews
• Lead day-to-day security operations: vulnerability management, patching, and incident response
• Manage deployment and optimisation of CrowdStrike, Defender, and Fortinet
• Infrastructure Leadership
• Be hands-on in managing Azure cloud environments and infrastructure operations
• Oversee projects such as Windows 11 upgrades, Teams Calling rollout, and Azure DevOps adoption
• Ensure patching, endpoint lifecycle, and vendor-delivered services run smoothly
• Optimise and automate processes where possible
• Strategic Contribution
• Provide insight and recommendations on future security and infrastructure strategy
• Advise the Executive GM, Digital on risk, investment priorities, and emerging technologies
• Help shape the roadmap for cyber maturity and infrastructure uplift
• Team & Vendor Management.
• Manage and coach Network and Cloud Engineers; mentor a junior EUC/SecOps staff member
• Collaborate closely with the broader 12-person IT team in a knowledge-sharing, team-first culture
• Lead vendor relationships to ensure value, accountability, and quality delivery.

Must Haves

• Proven hands-on experience delivering ISO 27001 compliance & audits
• Strong technical expertise in Microsoft Azure infrastructure
• Practical knowledge of CrowdStrike, Defender, Fortinet, and vulnerability management
• Deep experience in patching, asset lifecycle, and endpoint operations
• Vendor management capability across infrastructure and security domains
• Leadership experience managing engineers and mentoring junior staff
• Excellent communication skills - able to explain technical detail while influencing strategy

Nice to Have

• Experience uplifting to NIST compliance maturity
• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or Azure certs
• Track record delivering IT projects in industrial, logistics, or critical infrastructure environments

Why Apply?

• Hybrid role combining hands-on delivery with strategic influence
• Direct line to the Executive GM, Digital, with enterprise-wide visibility
• Lead projects including Windows 11, Teams Calling, Azure DevOps
• Shape the organisation’s journey towards NIST maturity
• Manage and mentor a small but high-impact team, with broader IT collaboration
• Perth-based with hybrid flexibility (2–3 days onsite)

About Us

Court Services Victoria provides corporate services and facilities to support the performance of the judicial, quasi-judicial and administrative functions of Victoria's courts and tribunal, Judicial College and Judicial Commission.

Collectively, Victoria's Supreme, County, Magistrates', Children's, and Coroners courts, the Victorian Civil and Administrative Tribunal (VCAT), the Judicial College of Victoria, the Judicial Commission of Victoria, and Court Services Victoria (CSV) are referred to as the `Courts Group'.

Our people enable the Courts Group to deliver on each jurisdiction's own strategic priorities while also pursuing strategic opportunities that are interconnected and deliver benefits more broadly.

CCV

The County Court of Victoria is established pursuant to the County Court Act 1958. It has original and appellate jurisdiction and is the principal trial court in the State of Victoria. The Court hears over 12,000 criminal, common law, and commercial cases each year. The County Court has unlimited monetary jurisdiction in common law and commercial matters. In its criminal jurisdiction, the Court hears all indictable offences except treason, murder, and related offences.

There are a total of 80 Judges of the Court and over 300 staff, including judicial support staff. The County Court regularly conducts circuit sittings at 12 circuit courts situated in major centres throughout regional Victoria.

The County Court is committed to continuous improvement in accordance with the International Framework for Court Excellence. The Court's vision is to be a leader in court excellence, delivering the highest standard of justice to the community and inspiring public confidence in the rule of law.

About the Role

We are seeking a dynamic and experienced professional to lead the Risk and Records Management function. This role plays a critical part in promoting a positive risk culture, ensuring compliance, and driving continuous improvement across the Court's governance, audit and assurance programs.

In this role, you will oversee strategic and operational risk registers, lead the Records Management team, and provide expert advice on emerging issues. You will also support the Court's Risk, Audit and Finance Committee and contribute to the development of governance policies and frameworks. You will be responsible for:

• leading and managing the Records Management function and personnel
• maintaining and monitoring strategic and operational risk registers
• providing secretariat support to the Risk, Audit and Finance Committee
• managing internal and external audit programs and track implementation of recommendations
• developing and reviewing governance policies and procedures
• collaborating with stakeholders to assess critical incidents and drive business process improvements
• support the Director, Business Services in delivering strategic risk and audit initiatives

About You

The ideal candidate will bring strong leadership and strategic thinking skills, with the ability to influence and communicate effectively across all levels. You will be resilient, collaborative and committed to public sector values.

Experience in risk management and a solid understanding of the effective identification and management of risk and compliance issues in an operational environment is desirable.

How to apply

Click the `Apply Now' button, ensuring you include the following in your application:

• resume
• a short cover letter

Other information

CSV is the employer of staff at Courts Group. CSV has a firm commitment through its Koori Employment Plan to increase participation of Aboriginal and Torres Strait Islander people across our workforce.

We value the unique backgrounds, experiences, and contributions that each person brings to our community and encourage and celebrate diversity. Those from the LGBTQIA+ community, women, people of all ages, with disabilities, culturally and linguistically diverse people, and those who are neurodiverse, are encouraged to apply.

We aim to create a workforce that reflects the community in which we live.

If you require adjustments to the recruitment and selection process or require an alternative format to any of the application material, please don't hesitate to email the contact person listed in the advertisement.

As part of our commitment to a safe and respectful workplace, we conduct pre-employment checks, including but not limited to, reference checks, police checks and misconduct screening. These checks are handled confidentially and with care and are a standard part of our hiring process to ensure the right fit for both our candidates and the organisation.