Cyber Risk Management

• Lead the identification, assessment, management, and reporting of information security risks across the organisation
• Maintain and mature cyber risk management frameworks, methodologies, and governance processes
• Ensure security risks are appropriately assessed, documented, prioritised, and communicated to senior stakeholders
• Drive effective risk treatment plans and track progress against agreed remediation activities
• Provide regular reporting and insights to senior leadership and governance forums
• Lead threat identification and modelling activities including formal workshops

Vulnerability Management & Security Assurance

• Own Bravura's vulnerability management programme and drive continuous improvement in security posture
• Establish effective governance, prioritisation, and remediation processes for security vulnerabilities
• Monitor and report on security trends, vulnerabilities, and areas of emerging risk
• Drive security assurance activities including penetration testing, technical assessments, and control validation exercises
• Ensure security weaknesses are identified, understood, and remediated appropriately

Security Architecture & Engineering Governance

• Lead the Security Architecture function and establish security standards, patterns, and security-by-design principles
• Ensure security requirements are embedded within technology projects, cloud services, and operational environments
• Provide governance and oversight of security architecture decisions across the organisation
• Act as a trusted advisor to technology leaders on security risks and control design
• Support secure adoption of new technologies and digital transformation initiatives

Governance, Audit & Compliance

• Lead security governance activities and ensure effective reporting across the organisation
• Support regulatory, client, and audit requirements through effective control design, evidence management, and remediation activities
• Support the successful delivery of internal and external audits
• Maintain and mature controls aligned to recognised frameworks and standards including ISO 27001, NIST Cyber Security Framework, CIS Controls, APRA CPS 234, and relevant regulatory obligations, in partnership with our Governance, Risk & Compliance team
• Partner with Risk, Compliance, and Infosec Assurance teams to strengthen organisational assurance

Executive Stakeholder Engagement

• Present security risks, trends, incidents, control effectiveness, and strategic recommendations to senior leaders and governance forums
• Support the Global Head of IT (Acting CISO) in executive communications and board-level reporting
• Build strong relationships with senior business stakeholders and act as a trusted advisor on information security matters
• Support customer and prospect discussions where security assurance and trust are critical to business outcomes

Essential Skills & Experience

• Significant experience in Information Security leadership roles, including responsibility for security operations, risk management, and security governance
• Experience leading high-performing cyber security or information security teams
• Proven experience supporting the development and implementation of information security strategies, roadmaps, and operating models
• Experience managing major security incidents and incident response activities
• Strong experience in vulnerability management, security assurance, and risk management
• Experience leading the infosec aspects of external audits and supporting regulatory compliance activities
• Proven ability to influence senior stakeholders and communicate effectively with technical and non-technical audiences
• Experience managing third-party security service providers and strategic technology partners

Technical Knowledge

Strong understanding of:

• Security Operations
• Incident Response
• Vulnerability Management
• Security Architecture
• Cloud Security
• Security Engineering
• Threat Detection and Monitoring
• Identity and Access Management
• Network Security
• Application Security
• Security Governance and Risk Management
• Regulatory and Compliance Requirements
• Rapid7 or either managed SIEM solutions

Experience with industry frameworks and standards such as:

• ISO 27001
• NIST Cyber Security Framework
• CIS Controls
• APRA CPS 234
• GDPR and privacy-related security obligations
• SOC and assurance frameworks

Key Attributes

• Calm, credible, and delivery-focused
• Pragmatic in balancing change with stability
• Comfortable operating at both strategic and operational levels
• Clear decision-maker with strong ownership mindset
• Commercial awareness and pragmatic decision-making
• Builds trust and bridges across technology and business functions
• Confident working across multiple teams across the globe
• Highly driven with strong problem-solving skills
• Comfortable operating in a lean environment and shaping new processes

Corporate Responsibilities Environmental & Health & Safety

• Ensure Annual Training is completed as required.
• Review Annually & Comply with all Company policies related to H&S and Environmental Management Systems
• Report all/any breaches or accidents/near misses immediately when discovered.

Working at Bravura

Our people are the heart of our business. We work hard to provide a rich employee experience and a robust framework for ongoing career development.

So, what’s next?

We make hiring decisions based on your experience, skills, and passion, so even if you don’t match every listed skill or tick all the boxes, we’d still love to hear from you.

Please note that interviews are primarily conducted virtually and if you require any reasonable adjustments or would like to note which pronouns you use, please let us know.

All final applicants for this position will be asked to consent to a criminal record and background check. Please note that people with criminal records are not automatically barred from applying for this position. Each application will be considered on its merits.