Lead Risk Assessor - Contract (Cybersecurity)

About the role

Hastha Solutions has an urgent need for a Lead Risk Assessor on a 6-month contract in Sydney, Australia, with possible extension. The role leads cybersecurity risk assessments across customer projects and works closely with project teams, business stakeholders and vendors to define and communicate cyber risk.

Key responsibilities

• Lead cybersecurity risk assessments across customer projects
• Collaborate with project teams to identify and address security gaps
• Communicate complex technical issues clearly to business stakeholders, including executives, through the risk decisioning process
• Manage stakeholder expectations and make informed risk decisions
• Improve team processes, documentation and engagement models
• Work with business stakeholders, engineers, delivery teams, product vendors and partners to understand and convey the cyber risk of delivered products
• Define and document reusable assets such as standardised findings and process improvements
• Contribute to the creation and governance of security strategy, standards and frameworks
• Mentor new and existing Risk Assessors and candidates on secondment, including shadowing and process guidance

Required profile

• Minimum 15+ years of experience in cybersecurity, with at least 8+ years in GRC or risk
• Practical experience in technical risk assessment
• Ability to turn complex technical risks into clear, actionable business insights
• Experience in large, complex environments
• Australian or NZ citizen or PR holder only

Required skills

• Familiarity with ISO, PCI, NIST and E8 standards
• Highly desirable: prior non-cyber risk or GRC experience
• Highly desirable: CRISC, CISSP, CISM or SABSA certification
• Highly desirable: Agile and DevOps experience