Cyber Security Assurance Lead
ABC-Org University
06.2021 - Current
- Lead the development, governance and continual improvement of the University’s cyber security assurance and GRC capability. Provide thought leadership and trusted advisory services across cyber risk, secure research enablement, ISO27001 certification, and control governance. Collaborate with system owners, executive sponsors, government partners and IT delivery teams to protect critical information assets while enabling academic innovation.
- Key Responsibilities
- Maintain and uplift a certified ISO27001 Information Security Management System (ISMS) including expansion into new high-risk research domains
- Lead cyber risk and controls assurance program including policies, standards, procedures and maturity assessment
- Guide development of KRIs, dashboards and metrics for transparency of security posture and governance decision-making
- Partner with government agencies, researchers, defence-aligned programs and support secure research compliance including PSPF, DISP, ISM, DGov, ASD’s ACSC requirements
- Provide specialist advice on regulatory alignment including privacy, critical infrastructure policy and contractual requirements
- Review technology and business initiatives to identify cyber risks and ensure compliant-by-design approaches
- Develop uplift initiatives for GRC processes through automation, templates, reporting and guidance
- Mentor team members and build capability across the broader cyber security function
- Regularly act as CISO during leadership absence, interfacing with senior executives and responding to security escalations