Lead Risk Assessor - Contract - Australia

About this role

Urgent requirement of Lead Risk Assessor - Contract - Australia

Requirements

Key Accountabilities Include

• Leading cybersecurity risk assessments across customer projects
• Collaborating with project teams to identify and address security gaps
• Communicating complex technical issues in clear business terms, including to executive stakeholders, such as through the risk decisioning process.
• Making informed decisions and managing stakeholder expectations
• Leading the uplift of team processes, documentation, and engagement models

Additional information

• Actively collaborate with business stakeholders, engineers, delivery teams, product vendors and partners, as well as other Cyber Assurance stakeholders, to adequately understand and convey the cyber risk of a delivered product or solution
• Define and document re-usable assets such as standardised findings and process improvements to drive improved capability within the function
• Input into the creation and governance of security strategy, standards and frameworks to ensure a coherent and optimised overall security policy within the customer.
• Identify and eƯectively communicate security risks to business stakeholders in a timely manner - harvesting and harmonising insights from all relevant areas including privacy, legal, engineering and operational stakeholders.
• Foster strategic relationships across industry and technology vendors to anticipate and plan for emerging opportunities and threats to inform risk assessment.
• Mentor and be a role model for new and existing Risk Assessors and candidates on secondment, including shadowing, process guidance and providing feedback.
• Handle complex initiatives while simplifying them to support eƯective execution.

Essential

• Minimum 15+ years of experience within Cybersecurity, with at least 8+ years of experience in GRC ot risk function.
• Practical experience in technical risk assessment.
• Familiarity with standards like ISO, PCI, NIST, and E8
• A collaborative mindset and ability to translate complex technical risks into clear, actionable business insights
• Experience working in large, complex environments

Highly Desirable

• Prior experience within a non-cyber-related risk or GRC role.
• Industry certifications such as CRISC, CISSP, CISM or SABSA
• Experience in Agile and DevOps

*Duration: 06 Months*and possible extension

• Eligibility:* Australian/NZ Citizens/PR Holders only
• Email: jobs@hasthasolutions.com*

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.