Cyber Governance Manager

at  Baptcare

Full-time
Camberwell, VIC
About Us
At Baptcare, we care. Our Mission and Vision are lived through our WE CARE Values: for our residents, customers, clients, partners, and supporters; with the very young through to the very old, the vulnerable, with families through all of life’s stages and challenges.
Baptcare is a purpose driven organisation working across Victoria, Tasmania, and South Australia. Focused on providing residential and community care for older people and support to children, families, and people with disability, financially disadvantaged people and people seeking asylum.
Our Values are Wellbeing, Ethics, Co-creating, Accountability, Respect and Effectiveness ​. ​
About the Role
The primary responsibility of the Cybersecurity Governance Manager is to ensure that Baptcare’s Cyber Security controls, frameworks, policies, processes and standards are current, aligned with legislation and best practice, and to manage adherence. This key role enables Baptcare to meet strategic and operational goals by understanding how different cyber risks can affect Baptcare’s operations, prioritise efforts to secure the most vital aspects of the business and minimise potential disruptions, data breaches, noncompliance, financial penalties or reputation. The Cyber Governance Manager works with the Head of Cyber and Infrastructure and also with the ITLT and business stakeholders to continuously develop, and effectively support Baptcare’s cyber security controls.

KEY SKILLS:

Effective communicator with Excellent written and verbal communication skills.
Proven capability in conducting risk analysis and implementing effective controls.
Previous experience in developing, communicating, and testing Disaster Recovery Plans
Successful management of Cyber Security programs with a focus on continuous improvement.
Demonstrated commitment to delivering high-level customer service.
Proven leadership in Cyber governance, including experience writing and updating Standards, Polices and Frameworks, with at least 2 years of experience.
Proven ability to engage stakeholders and lead teams to meet performance targets.
Knowledge of Cyber Security industry frameworks (NIST, ISO27001, ASD Essential Eight, etc) and legislative compliance requirements.
Alignment and commitment to Baptcare’s Mission, Vision and Values
Essential
Tertiary degree in the field of information technology, computer science or similar discipline
Working Knowledge of infrastructure architecture, Cloud Adoption (IaaS and SaaS), Cyber-Security, and project management methodologies
Industry Certifications (CRISC or CISM)
Desirable
Experience in Aged Care, Community Services or Not-for-Profit/NGO organisations
ITIL (Intermediate or Expert)
Certification in one or more project management methodologies
Baptcare is focused on living our values, not just talking about them. You’ll find the culture at Baptcare is one of genuine respect, support, and positive intention. We work hard to achieve results through change, continuous improvement, and ongoing focus on providing the best service delivery to our stakeholders.

Manage the cyber security program and prioritise workstreams based on the Cyber Security threat landscape.
Monitor and report on operational cyber vulnerabilities in the Baptcare environment.
Act as a subject matter expert (SME) between cybersecurity and the lines of business in the development of appropriate policies, standards, and frameworks.
Implement and maintain governance, risk and compliance-related security measures to protect the IT environment and data.
Ensure compliance with industry regulations and data protection laws.
Lead and Manage Cyber Awareness Training and advising on strategy to increase cyber awareness.
Monitor and report any breach of policy to the Head of Cyber and Infrastructure and any higher impact breaches (Catastrophic, Significant or Major as defined in the Cyber Response plan) to the CIO.
Identify technology and security issues/risks arising within the business and advise relevant stakeholders across the business.
Ensure the suitability, and at a minimum, annual testing of IT disaster recovery plans and Cyber Security Incident Response Plans.
Manage annual security penetration testing.
Ensure incident response, and communication plans meet business needs and compliance obligations.
Review technology incidents and ensure corrective action is undertaken, and controls are implemented to mitigate risks, and record any lessons learnt.
Ensure any projects undertaken or application developments are aligned with Baptcare’s information security requirements.
Foster a more security conscious corporate/Baptcare culture throughout the organisation, ensuring that individual and collective roles and responsibilities for information security are clearly communicated and well understood.
Recommend and advise the content of the annual information security training and awareness program.