Business Information Security Adviser - South Bank, QLD
Core
Lead security governance, compliance, assurance, and risk management for a global business pillar, partnering with senior leaders and technical teams to drive security maturity.
Role type
Senior IC business information security adviser (governance & risk)
Builds
Security compliance and assurance management systems, risk frameworks, and secure-by-design product requirements
Domain
Travel industry + Information Security Governance
Required skills
Risk frameworks (ISO 31000), Security frameworks (ISO 27001/27002, PCI DSS, SCA, SOC 2), Contract security negotiation, Executive reporting, Third-party vendor assessment, M&A due diligence
Preferred skills
Managerial experience in security leadership, Stakeholder influencing, Complex problem analysis
Technologies
ISO 31000, ISO 27001, ISO 27002, PCI DSS, SCA, SOC 2
Responsibilities
Partner with CISO and business leaders to identify and manage information security risks; Lead security governance, compliance, assurance, and security testing activities; Review and assess emerging security technologies and practices; Implement structured security risk management processes; Develop and maintain security compliance and assurance management systems; Lead security maturity and compliance assessments against established standards; Collaborate with product teams to ensure secure-by-design applications; Assess third-party security controls and vendor assurance requirements; Support mergers and acquisitions through security due diligence; Partner with legal to manage security requirements in contracts; Prepare executive-level security reporting and risk assessments.
Seniority
Senior, hands-on IC with management responsibilities
