Cyber Risk & Compliance Manager

About the role

We are currently seeking a Cyber Security Risk & Compliance Manager to join our global security team.

The Cyber Security Risk & Compliance Manager will play a leading role in establishing and maintaining ongoing compliance requirements for cyber certifications controls (e.g. ACSC Essential Eight, NCSC Cyber Essentials), managing vendor risk management and supporting the ISO27001 certification.

The role can be a hybrid in office or fully remote role, based anywhere in Australia. This is due to the requirement that the role partially flexes their working week to attend UK Hub meetings 2-3 days a week.

Key responsibilities

• Manage and maintain the governance framework, processes, and policies supporting the global cyber certification programmes.
• Assist in managing ISO 27001 risks and controls, including coordinating internal and external audit activities for the Australia business.
• Support the business stakeholders in developing and maintaining cyber security policies that are appropriate for our business sector.
• Collaborate with the Cyber Security GRC Team to ensure alignment with global cyber risk frameworks, control standards, and uplift initiatives.
• Lead engagement with internal stakeholders and relevant governing bodies to coordinate and deliver the annual Cyber Essentials and Essential Eight audit and assessment program.
• Identify, assess, and continuously monitor cyber security risks across the Australia business.
• Work with business units and risk functions to assess impacts, define security requirements, and ensure risks are managed in line with global risk frameworks.

About you

• A minimum of five years of IT experience in an information security role.
• Three to 5 years’ experience in IT Governance, Risk and Compliance related roles.
• Experience of working with multiple stakeholders.
• Experience with the implementation, governance and compliance of common information security regulations, certifications and management frameworks including ISO 27001, Essential Eight, UK Cyber Essentials, NIST CSF and European GDPR.
• Strong interpersonal, presenting and management level communication skills, supported by strong problem-solving ability.
• Ability to obtain Australian Government security clearance.

Benefits

We work hard to create an environment that brings out the best in our people. We believe in building careers through providing a safe, connected and innovative culture that supports ongoing growth and development. We offer industry-leading benefits such as specialised learning and development programs, a mental health and wellbeing program, industry leading paid parental leave policy, an additional purchased leave option and coaching programs for staff on parental leave.

Diversity & Inclusion

We are committed to building a workforce that reflects the diverse society in which we live and work. Laing O’Rourke is recognised as a WGEA Employer of Choice for Gender Equality in 2020, 2022, 2024 and 2026. We know that the right culture and purposeful innovation are key to delivering impact.

Applications from recruitment agencies will not be considered.