Cyber Risk, Governance and Compliance Manager - Hybrid

About this role

Work options: Hybrid

About Us

DuluxGroup is a leading marketer and manufacturer of premium brands that help people create better spaces to live and work. With a heritage of over 100 years, we’re home to trusted names like Dulux, Selleys, Yates, Cabot’s, and B&D, delivering products across paints, coatings, adhesives, garden care, and home improvement. As part of Nippon Paint Holdings, we combine global scale with strong local roots, driven by innovation, sustainability, and a commitment to our customers.

Our Group Functions cover Supply Chain, Sales Capability, Finance, People & Culture, IT & Digital, and Legal are an integral part of our Business Units that enable growth and operational excellence. They provide the insights, technology, and expertise that keep our businesses agile and future ready. Joining DuluxGroup means contributing to iconic brands, working in a collaborative culture, and enjoying opportunities for career growth and flexibility.

Join our IT team in one of many newly created roles at the heart of DuluxGroup’s digital transformation, helping deliver a major business upgrade across SAP, Microsoft Dynamics 365 and Databricks.

What You’ll Be Doing

As Governance, Risk & Compliance Manager, you will lead and mature DuluxGroup’s cyber security governance, risk and compliance capability across the Pacific region, with the opportunity to expand your impact into European operations.

This is a high-impact role where you will shape cyber risk frameworks, drive the adoption and continuous improvement of the NIST Cybersecurity Framework (CSF), strengthen controls assurance and support audit requirements, while influencing senior stakeholders across technology, risk, legal, internal audit and business leadership teams.

In a business with a growth mindset, a people-first culture and a strong sense of ownership, you will have the opportunity to build practical, risk-based frameworks, influence stakeholders at all levels and help drive the ongoing maturity of cybersecurity across DuluxGroup.

Our Benefits

• Up to $1,000 net annually to cover private health extras gap costs
• Exclusive discounts on DuluxGroup products and partner offers
• Stay active anytime, anywhere through our partnership with Fitness Passport
• 20 weeks paid parental leave (primary carers) and 2 weeks partner leave from day one
• Market leading learning, development and career pathways
• Access to our Wellbeing Hub and full EAP support

What We’re Looking for

• Proven experience in a cyber security governance, risk and compliance leadership or senior practitioner role, with the ability to drive meaningful outcomes.
• Strong expertise in the NIST Cybersecurity Framework (CSF), including conducting assessments, identifying capability gaps and developing risk-based improvement roadmaps.
• Demonstrated capability in cyber risk management, including risk identification, assessment, treatment planning and ongoing monitoring.
• Experience managing control frameworks and leading controls effectiveness and assurance activities, along with exposure to audit and compliance requirements such as JSOX or SOX.
• A confident communicator who can build trusted relationships, influence stakeholders at all levels and successfully lead change across diverse business groups.

We Value Potential and Passion

At DuluxGroup, we believe that the right attitude and a willingness to learn can be just as important as meeting every requirement on a job description. If you’re passionate about IT and excited about this role, we encourage you to apply even if you don’t meet all the essential criteria. We value diverse experiences and perspectives, and we are committed to providing opportunities for growth and development.

Why Join Us?

Progressing your career with the DuluxGroup means being part of a network of over 8000 employees globally who believe in our purpose to ‘Imagine a Better Place’

With origins dating back to 1918, we are a leading marketer and manufacturer of iconic brands such as Dulux, Selleys, Cabots, Yates and B&D to name a few.

By joining us, you will be a part of a long-term strategy to deliver profitable growth through brand leadership, innovation and customer intimacy. We are committed to internal mobility and growth while fostering an inclusive culture with flexible work options.

If this sounds like an environment you would like to be a part of, please apply online!

Video

About compliance & regulatory roles for ex-police

Compliance, AML/CTF and regulatory roles. Working to AUSTRAC, ASIC and APRA obligations is a stronger regulatory grounding than most civilian applicants can offer — firms increasingly recognise this.