Security Risk Manager

Could this be one of those rare moments to do the best work of your career? At Tabcorp, our story continues to evolve every day. It’s an exciting moment in our history – a new era of Tabcorp. We’re raising the game by creating the most engaging betting and entertainment experiences, and to lead in integrity.

We’re here to create excitement everywhere – through our incredible people, unrivalled experiences and strong relationships. We’re bringing industry leading products and services to our customers and breaking into new horizons.

Game to join us?

What you’ll do

You will lead a small team in the identification, assessment, management, monitoring and reporting of security risks and actively participating in all regulatory assessments and internal/external audits.

• Provide specialist advice to business stakeholders on compliance and adherence to cybersecurity policies, standards, and guidelines.
• You will work closely with Information Security, Chief Risk Office and Technology Risk teams to manage and report on the identification and analysis of security risks and their associated mitigating controls.
• You will collaborate and communicate with a broad range of business stakeholders across all levels of the business, adapting your communication of security risks to suit.
• You will leverage your expertise with security risk management and contribute significantly to the continuous improvement of information security risk posture of Tabcorp.
• You will lead the management and maintenance of security risk registers, develop risk assessments, and monitor mitigation plans and actions to ensure timely and effective delivery, so the benefits of technology come to life, always with a focus on delighting our customers.
• You will help us drive new thinking in security risk management by taking a security risk quantification view through risk reporting (including committee and board reports and dashboards) and help us uplift how we identify, manage and report on security risks. Your risk work will also help inform the organisation’s security strategy.
• You will lead, mentor and excite our Technology team to proactively promote a culture of ‘doing the right thing’, demonstrate and socialise security best practices, have an agile mindset, handle complexity, be open to challenges, be a change agent, collaborate and communicate effectively to multiple stakeholders within and outside Technology to deliver outcomes.

What you’ll bring

• Relevant tertiary qualifications or equivalent experience.
• An industry recognised security accreditation or certification (eg, CRISC, FAIR) (desirable).
• Extensive experience in technology/ security risk management (mandatory).
• Extensive stakeholder engagement skills and the ability to communicate complex security risks and issues succinctly and effectively with all levels of the organisation including non-technical and technical people (mandatory).
• Extensive knowledge of risk management frameworks, risk assessment, security best practice and practical application of security controls in an enterprise environment.
• A background in a technical security role (eg: security architecture) will help with understanding, articulating the security risks in risk assessments.
• Understanding of security assurance and controls testing; third-party vendor governance or third-party risk management; security exceptions and security policies and standards.
• Knowledge of cyber security frameworks such as NIST CSF.
• Strong analytical and problem-solving skills.
• Reputation as a trusted advisor.

What you’ll get

Not only will you receive an awesome candidate experience from our caring Talent team, the perks of working with us are pretty good too!

The list is extensive but here are a few:

• A “say yes” approach to flexible working to meet your individual needs
• A multitude of leave types such as cultural leave, volunteer leave and 18 weeks’ parental leave for all new parents, regardless of gender
• We’re committed to Inclusion & Diversity with a range of initiatives such as our annual Inclusion Month celebrations and our Gender Affirmation Statement of Support
• We’re proud to have been named an Employer of Choice for Gender Equality by the federal government's Workplace Gender Equality Agency (WGEA) for the seventh consecutive year
• We offer a comprehensive (and free) health and wellbeing app called The Arena to support you and your family’s mental and physical health
• We’re committed to your learning and development with a dedicated platform with helpful resources from leadership to technology to upskill and cross train

About Tabcorp

We’re Australia’s leading gambling entertainment company. Together, we build on our 100+ year heritage by delivering Excitement with Integrity, every day. Each one of us is here to put our customers at the heart of everything we do by creating moments that engage, surprise, and thrill.

Our 3,000+ strong team is as diverse as Australia itself. Our people drive homegrown world-class brands; TAB, Sky Racing and MAX. As an ASX listed company, we’re proud to shape our industry for the better. Because together, anything’s possible.

Tabcorp is committed to creating an inclusive workplace where all our people feel valued for their unique qualities and have a sense of belonging. If you need assistance or adjustments to fully participate in the application process, please contact tabcorprecruitment@tabcorp.com.au

COVID

Tabcorp is closely monitoring the Department of Health guidelines to ensure we continue to provide a safe working environment. You may be required to present evidence of Covid vaccination in order to comply with Public Health directions to fulfil the requirements of this role.

This role can be based in Melbourne, Sydney or Brisbane.

#LI-POST #LI-HYBRID