drjobs ITRO Lead

Employer Active

1 Vacancy
drjobs

Job Alert

You will be updated with latest job alerts via email
Valid email field required
Send jobs
Send me jobs like this
drjobs

Job Alert

You will be updated with latest job alerts via email

Valid email field required
Send jobs
Job Location drjobs

Melbourne - Australia

Monthly Salary drjobs

Not Disclosed

drjobs

Salary Not Disclosed

Vacancy

1 Vacancy

Job Description

Job Description

ITRO Lead Security Risk & Resilience

About the Role:

We are seeking a seasoned ITRO Lead to drive security controls assurance risk management business continuity and identity governance across a complex enterprise environment. This role is pivotal in ensuring operational resilience and compliance with industry standards. The successful candidate will lead cross-functional teams and governance processes delivering strategic oversight and hands-on execution across multiple domains.

Key Responsibilities:

Controls Assurance

  • Align and implement security controls based on ISO 27001 NIST and Essential 8 frameworks.
  • Ensure compliance with internal security policies standards and guidelines.
  • Collaborate with technical teams to embed controls across systems and service lines.
  • Facilitate security audits and drive zero-finding outcomes.
  • Support contractual compliance and stakeholder engagement.

Risk & Issue Management

  • Conduct risk assessments and develop treatment plans.
  • Govern risk and issue resolution through client-led forums.
  • Ensure residual risks are managed to acceptable levels.

Resilience & Continuity

  • Develop and manage Business Continuity Plans (BCP) for services in scope.
  • Coordinate IT Disaster Recovery (DR) and IT Service Continuity (ITSC) testing.
  • Mobilise resources during continuity events and lead simulation exercises.

Governance & Reporting

  • Lead account-level governance meetings with leadership.
  • Deliver regular reports on SLAs KPIs identity governance and vulnerability remediation.

Vulnerability Management

  • Govern remediation across platforms and applications.
  • Collaborate with CSOC and threat intelligence teams to address critical vulnerabilities.
  • Implement threat-intel based remediation processes and ensure timely reporting.

Identity Governance

  • Lead user access reviews and certification campaigns.
  • Oversee privileged third-party and role-based access governance.
  • Ensure campaign readiness and resolve blockers to meet review deadlines.

Additional Responsibilities

  • Develop and deliver security training programs.
  • Support practice-led initiatives within the Strategy and Risk (S&R) domain.

Required Experience:

  • Proven expertise in ISO 27001 NIST risk management and IT resilience.
  • Strong background in security controls assurance and identity governance.
  • Experience in vulnerability management and operational reporting.
  • Minimum 5 years of relevant experience.
  • Baseline security clearance required.

Preferred Certifications:

  • ISO 27001 Lead Auditor
  • Certified Information Security Manager (CISM)
  • Certified Information Systems Auditor (CISA)

Whats on Offer

This is a6 month contractbased inMelbourne offering the opportunity to lead strategic initiatives in a high-impact environment. Youll work with experienced teams and contribute to enterprise-wide security and resilience programs.

How to Apply

Please upload your resume to apply. We will be in touch with further instructions for suitably skilled candidates. You may be required to complete selection criteria as part of your application.

For further information contactFarbar Siddiqon0or email.

Candidates must be willing to undergo pre-employment screening checks including ID and work rights verification security clearance validation and other checks as required.

Employment Type

Full-Time

About Company

Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.