Job Search

• Full-time continuing role within UNSW IT, Cyber Directorate – Cyber Security Assurance Lead
• Starting Salary $153,933 plus generous superannuation and leave loading 
• Kensington, Sydney location, 2-3 days in the office, Hybrid working 

UNSW isn’t like other places you’ve worked. Yes, we’re a large organisation with a diverse and talented community; a community doing extraordinary things. Together, we are driven to be thoughtful, practical, and purposeful in all we do. Taking this combined approach is what makes our work matter. It’s the reason we’re one of the top 20 universities in the world (QS top 20) and a member of Australia’s prestigious Group of Eight. If you want a career where you can thrive, be challenged and do meaningful work, you’re in the right place. 

The Cyber Security Assurance Lead - leads the operational delivery and reporting of the Cyber Security Assurance Services within a fit-for-purpose and adaptive Cyber Security Risk Management framework. Responsible for the controls assurance testing, metrics reporting, and the provision of cyber security subject matter expertise. The Cyber Security Assurance Lead reports to the Cyber Security Controls Assurance Manager and has no direct reports.  

Accountabilities: 

• Conduct regular review of cyber security controls across IT systems, applications, and networks and perform testing to validate the design and operating effectiveness of controls, identify control gaps, vulnerabilities, and risks, and provide actionable insights and recommendations for remediation. 
• Collaborate with stakeholders to develop remediation plans, track progress toward remediation, and work with business owners, control owners and operators to resolve and close findings/issues. 
• Update the cyber risk register with risks from assurance reviews. 
• Prepare detailed audit reports, including findings, risk impacts, and recommendations for senior management and stakeholders, and communicate and report on control testing outcomes and findings. 
• Develop and maintain dashboards and metrics to monitor the implementation and effectiveness of security controls, and implement, operationally manage and continually improve the quarterly metrics program. 
• Report monthly to the CISO and Deputy CISO on the progress of cyber security assurance. 
• Demonstrate leadership in managing and improving UNSW’s assurance capabilities, including improvements to control assurance methodologies, testing procedures, and reporting processes, (incl. Automation). 
• Support the independent audit of cyber security controls on behalf of the University, including statutory audits completed by the Audit Office of NSW. 
• Continually stay up to date and aware of legal, regulatory compliance and contractual obligations that are relevant to the University’s management of cyber security risk. 
• Undertake other duties appropriately and in line with this position as requested by the Cyber Security Controls Assurance Manager and the Head of Cyber Security Governance & Assurance. 
• Align with and actively demonstrate the Code of Conduct and Values. 
• Cooperate with all health and safety policies and procedures of the university and take all reasonable care to ensure that your actions or omissions do not impact the psychosocial or physical health and safety of yourself or others. 
• Ensure hazards and risks of psychosocial and physical are identified and controlled for tasks, projects, and activities that pose a health and safety risk within your area of responsibility. 

*5+ years of IT security experience, ideally with global consulting firms, large technology companies, government agencies, or defence consultancies.  

*Thorough understanding of penetration testing, vulnerability management, application security testing, and source code review.  

*Experience in a first-line assurance role, assessing controls for design and operating effectiveness; experience in security controls testing is advantageous but not mandatory.  

*Strong analytical skills with the ability to interpret data and provide actionable insights for management and problem-solving skills to address challenges effectively.  

*Strong fundamentals in Cyber Security Governance, Risk, and Compliance (GRC) principles and practices.  

*Comprehensive knowledge of industry standards and frameworks, such as ISO 27001, NIST 800 53, CSA, Essential 8, PCI DSS, COBIT 5, and MITRE ATT&CK.  

*Bachelor’s degree in Cyber Security, Information Technology, or a related field.  

*Relevant industry certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Auditor (highly desirable).  

*Strong interpersonal, communication, and negotiation skills, with the ability to build effective relationships and influence stakeholders at all organizational levels.  

*Capability to present complex technical information in a concise, clear, and credible manner for diverse audiences.  

*Demonstrated high level of personal motivation, resilience, and ability to work effectively individually or in teams.  

*An understanding of and commitment to UNSW’s aims, objectives and values in action, together with relevant policies and guidelines.  

*Knowledge of health & safety (psychosocial and physical) responsibilities and commitment to attending relevant health and safety training. 

Benefits and Culture 

• Flexible Working Options (work from home, flexible hours etc)  
• Career development opportunities 
• 17% Superannuation contributions and additional leave loading payments  
• Additional 3 days of leave over Christmas period 
• Discounts and entitlements (retail, education, fitness) 

For further details on the benefits, please visit https://www.jobs.unsw.edu.au/lifestyle-benefits 

To apply:  Please submit your CV, Cover Letter and responses addressing the required Who you are criteria. 

Please note: Sponsorship is not available for this role; valid Australian working rights are required on application. 

Pre-Employment Checks 
As part of our recruitment process candidates may be required to undergo pre-employment screening, which may include reference checks, qualification verification, right-to-work verification, and criminal history screening where relevant to the role. 

Contact: Jen MacLachlan - Talent Acquisition Partner- e: j.maclachlan@unsw.edu.au 

Please apply through the application portal as we do not accept direct applications to the email above.