Company description:

At Bendigo Kangan Institute we change lives through the power of education and skills.

BKI brings together Bendigo TAFE, Kangan Institute, VETASSESS and eWorks, to connect people and industries with the transformative power of education and careers.

We deliver future-ready skills, training, and assessment solutions, as well as lifelong learning opportunities. Our vision is to become Australia's leading skills provider.

If you are passionate about joining an agile and forward-thinking organisation that fosters innovation or thrive on being part of an inclusive and united team that puts the customer first, please read on.

Job description:

Location: Cremorne, Melbourne

Role Type: Full time Ongoing

Remuneration: $113,399 to $123,531 + 12% Superannuation

Shape the Future of Cyber Security at VETASSESS:

Join VETASSESS in a pivotal cyber security role where you'll drive governance, risk, compliance and security architecture initiatives that protect critical systems, information and services. Working across the organisation, you'll influence strategic decision-making and help shape a resilient and secure technology environment.

This is a senior specialist role suited to a security professional who enjoys working at the intersection of governance, risk, compliance, and technology. You will be the custodian of our Information Security Management System (ISMS), driving continuous improvement across ISO/IEC 27001, ASD ISM, Essential Eight, and Right Fit for Risk (RFFR) requirements while providing expert guidance on infrastructure and security architecture.

About The Role:

Reporting to the IT Infrastructure and Security Manager, you will be responsible for strengthening cyber security maturity across the organisation through effective governance, compliance, risk management and security advisory services.

• Lead and mature VETASSESS's Information Security Management System (ISMS).
• Drive compliance and audit readiness activities across ISO/IEC 27001:2022, ASD ISM, Essential Eight, and RFFR frameworks.
• Manage security risk assessments, control effectiveness reviews, and remediation roadmaps.
• Provide expert advice on network security, infrastructure security architecture, secure remote access, and segmentation.
• Oversee vulnerability management, security operations governance, and incident response reviews.
• Lead Data Loss Prevention (DLP) governance and data protection initiatives.
• Deliver security awareness, education, and phishing simulation programs.
• Support strategic technology projects by embedding security-by-design principles and conducting security assessments of new technologies and vendors.

What You'll Bring:

• Demonstrated experience in cyber security governance, risk management, and security operations oversight.
• Strong working knowledge of ISO/IEC 27001:2022, ISMS management, and external audit processes.
• Experience with ASD ISM and Essential Eight compliance programs.
• Broad understanding of enterprise infrastructure and security technologies, including firewalls, NAC, EDR, SIEM, vulnerability management, identity management, and DLP solutions.
• Excellent stakeholder engagement, communication, and technical writing skills.
• Ability to translate complex security risks into practical business recommendations.
•