Job Description

Our client is a major critical infrastructure organisation responsible for delivering essential services across Queensland. As part of a transition to a new operating model, they are establishing a dedicated Digital Risk and Assurance capability to strengthen governance, resilience and visibility across their digital and technology environments. This is a transformation-focused role rather than a BAU position. You’ll bring structure, discipline and practical governance to digital risk, cyber risk, technology assurance and audit oversight, with the opportunity to shape a capability that will be transitioned to a permanent function.

This role is suited to a Senior Digital Risk, Technology Risk, Cyber GRC, Technology Assurance or Digital Assurance professional with experience establishing or maturing risk and assurance functions within complex organisations. Reporting to the Manager Cyber Security, you’ll work across Cyber Security, Digital Technology, Enterprise Risk, Internal Audit, Procurement, Legal/Governance and delivery teams to establish practical governance frameworks, improve risk visibility and strengthen assurance across the organisation.

• Establish the purpose, scope and operating model for the Digital Risk & Assurance function
• Develop practical governance frameworks, processes and operating rhythms
• Define responsibilities, decision pathways, escalation processes and governance cadence
• Integrate digital and cyber risk management across IT, OT, cloud, suppliers, data and digital projects
• Align digital and cyber risk with broader enterprise risk management practices
• Establish consolidated oversight of digital and technology audit activity
• Coordinate audit responses, management actions, evidence requirements and remediation
• Track and escalate overdue or high-risk audit findings
• Develop reporting across digital risk, cyber risk, control effectiveness, assurance and regulatory obligations
• Support alignment with SOCI, IS18, NIST CSF, Essential Eight, ISO 27001 and relevant privacy and information management requirements
• Engage with senior stakeholders and provide clear, executive-level risk and assurance reporting
• Develop operating model documentation, governance materials, reporting templates and handover documentation
• Establish a sustainable Digital Risk & Assurance capability for transition to the permanent function

What you'll bring

• Strong experience across digital risk, technology risk, cyber risk, GRC or technology assurance
• Demonstrated experience establishing, transforming or maturing risk and assurance functions
• Strong understanding of enterprise technology and cyber risk management
• Experience developing operating models, governance frameworks and reporting structures
• Strong audit coordination, remediation and action tracking experience
• Experience with control assurance and assessing control effectiveness
• Ability to translate complex technology and cyber risks into clear business and executive-level reporting
• Strong stakeholder management skills across technology, cyber, risk, audit and business functions
• Experience working within complex, regulated or highly governed environments
• Understanding of SOCI, NIST CSF, Essential Eight, ISO 27001 and/or Queensland Government IS18
• Exposure to IT, OT, cloud, supplier and digital risk environments
• Strong written communication, documentation and analytical skills

Experience within critical infrastructure, utilities, government, energy, defence or other asset-intensive environments will be highly regarded. 

• Senior contract opportunity with genuine ownership of a new capability
• Opportunity to shape the Digital Risk & Assurance function from the ground up
• Work across IT, OT, cyber, cloud and digital environments
• Exposure to critical infrastructure and complex regulatory requirements
• High-level stakeholder and executive engagement
• Opportunity to establish frameworks, governance and processes that will have a lasting organisational impact
• Join a major Queensland organisation undergoing significant operating model transformation
• Clear opportunity to leave behind a sustainable capability for the permanent function

How to apply

Applications are treated with absolute confidentiality. Click APPLY or contact Clodagh at clodagh@decipherbureau.com for an informal conversation about your next career move. Equal opportunity and diversity are a priority. We encourage applicants from all backgrounds to apply.