AYAN InfoTech is looking for Lead Risk Assessor to join an exciting project based in Sydney / Melbourne. The role offers you the opportunity to contribute towards an extremely well structured and mature environment, working on sophisticated enhancement projects.

Role: Lead Risk Assessor
Location: Sydney / Melbourne
Contract Duration: 6 Months with high possible extensions
Experience: 6+ Years

Role Summary:

Senior cyber security risk professional responsible for leading risk assessments, providing strategic risk guidance, and influencing business decisions through clear communication of cyber security risks and opportunities.

Key Accountabilities

• Lead cyber security risk assessments across projects, products, and technology initiatives.
• Collaborate with project teams to identify, assess, and address security gaps and control deficiencies.
• Communicate complex technical risks in clear business terms, including to executive stakeholders through risk decision-making processes.
• Make informed risk-based decisions and manage stakeholder expectations effectively.
• Lead the uplift of team processes, documentation, and engagement models.

Roles and Responsibilities:

• Minimum 15 years of experience within Cyber Security.
• At least 8 years of experience in a Governance, Risk and Compliance (GRC) or Risk Management function.
• Practical experience conducting technical risk assessments.
• Knowledge of industry frameworks and standards including ISO 27001, PCI-DSS, NIST, and enterprise security frameworks.
• Strong stakeholder engagement and communication skills with the ability to translate technical risks into business insights.
• Experience working within large and complex enterprise environments.
• Collaborate with business stakeholders, engineers, delivery teams, product vendors, partners, and cyber assurance teams to understand and communicate cyber risk.
• Define and maintain reusable assets including standardised findings, templates, and process improvements.
• Contribute to the creation and governance of security strategy, standards, frameworks, and policies.
• Identify and communicate security risks in a timely manner while incorporating insights from privacy, legal, engineering, and operational stakeholders.
• Develop strategic relationships across industry and technology vendors to anticipate emerging threats and opportunities.
• Mentor and coach risk assessors and secondees through guidance, feedback, and knowledge sharing.
• Manage complex initiatives while simplifying outcomes to support effective delivery and execution.

Please note we will be able to contact only shortlisted candidates for this role. We thank you in advance for your interest.