Manager, Cyber Security Risk and Assurance

• Information Technology Services (ITS)

• Full-time, fixed-term position through to December 2027

• Base salary will be in the range $120,317 - $134,892 + 17% super (HEW Level 8) 

• Based at our St Lucia location  

Join Information Technology Services as Manager, Cyber Security Risk and Assurance Operations, where you will help shape a trusted, resilient and customer-focused cyber security environment for The University of Queensland. In this purposeful professional role, you will lead operational cyber security risk and assurance services across a complex university setting, working collaboratively with stakeholders, specialists and third parties to strengthen risk management, assurance processes and strategic decision-making.

Key responsibilities will include:

• Deliver customer-facing cyber security risk and assurance services, including risk assessments, third-party risk management, cyber security reporting and advice on security obligations in agreements and contracts.

• Develop and communicate plans, reports, insights, policies, standards and guidelines that support cyber security strategy, risk management and assurance outcomes.

• Plan and implement complex cyber security risk management activities, including business impact analysis, accreditation, control improvement recommendations and advice on identified risks.

• Provide operational direction, coaching and guidance to colleagues, while building effective working relationships and supporting a positive, inclusive team environment.

You are a collaborative and strategic cyber security professional who enjoys working across complex environments to influence positive security outcomes. You combine technical expertise with strong stakeholder engagement skills and are passionate about strengthening organisational resilience through effective risk and assurance practices.

You will bring:

• Qualifications and training equivalent to a bachelor’s degree in IT or a related discipline, or an equivalent combination of relevant experience, education and training.

• A postgraduate qualification in Cyber Security, a recognised industry certification, or an equivalent combination of relevant experience and education.

• Demonstrated experience developing and implementing cyber security strategies, policies and standards within large and complex organisations.

• Proven capability engaging with governance and steering committees to support effective oversight of cyber security programs, initiatives and risk.

• Strong knowledge of cyber security regulations, frameworks and industry best practice, with the ability to apply these in compliance, assurance and risk management contexts.

• Experience designing or applying third-party risk management frameworks, tools and assessment processes.

• Demonstrated experience facilitating cyber security risk assessments, business impact analyses and presenting recommendations that inform strategic decision-making.

• Excellent written, verbal and presentation skills, with the ability to translate complex technical concepts for a broad range of stakeholders.

• A proactive and solutions-focused approach, with the ability to manage competing priorities, drive continuous improvement and work effectively both independently and collaboratively.

As part of the UQ community, you’ll have the opportunity to work alongside the brightest minds, who have joined us from all over the world, working together to create a better world. Join a community where excellence is at the core of our culture, contributions are valued and a range of benefits and rewards are available.  

Enjoy up to 26 weeks paid parental and primary care leave, 17% super, 17.5% leave loading, flexible and hybrid working options, health and wellbeing programs, a heavily discounted Study for Staff program, on‑campus childcare, affordable parking, and salary packaging. 

For more information about this opportunity, please contact Marc Blum, Senior Security Architect Manager at [email protected]. For application inquiries, please reach out to the Talent Acquisition team at [email protected], stating the job reference number (below) in the subject line.  

When you apply, please ensure you upload a resume and cover letter summarising how your background aligns to the ‘About You’ section. Please note that applications received via email will not be accepted. 

Pre-employment checks may include: verification of the right to work in Australia, qualifications, and criminal history checks. This may also include checks relating to gender-based violence matters or other integrity and conduct requirements.  

You must maintain unrestricted work rights in Australia for the duration of this appointment to apply. Employer sponsored work rights are not available for this appointment.  

We're dedicated to equity, diversity, and inclusion. We recognise that career pathways and opportunities differ and encourage applications from candidates who may not meet every criteria but can demonstrate their potential relative to opportunity. We’re also happy to support any accessibility needs throughout the recruitment process. Just let us know how we can help by emailing [email protected] or calling +61 7 3365 2623. 

Applications close Sunday 13 September 2026 at 11.00pm AEST (R-67224).