About the Opportunity

We are partnering with Mining producer who is seeking an experienced Cyber Security, Risk & Governance Lead to drive and mature its cyber security capability across both corporate and operational technology environments.

This is a strategic leadership role responsible for strengthening cyber governance, risk management, compliance and assurance practices while ensuring security remains aligned to organisational objectives. You will work closely with technology teams, business leaders and external partners to establish robust security frameworks, provide risk-based guidance and support ongoing cyber maturity initiatives.

The Role

As the Cyber Security, Risk & Governance Lead, you will be responsible for defining and maintaining the organisation's cyber security direction, governance framework and risk management approach.

Acting as a trusted advisor to both technical and business stakeholders, you will oversee cyber risk and compliance activities, provide security architecture guidance on technology initiatives, coordinate audits and assurance programs, and ensure cyber security obligations are embedded across projects, vendors and operational processes.

This role offers the opportunity to influence enterprise-wide security outcomes while building a resilient and sustainable cyber security culture.

Key Responsibilities

• Develop and maintain the organisation's cyber security strategy, roadmap and continuous improvement program.
• Provide cyber security architecture, risk and assurance guidance for Operational Technology (OT) environments, industrial control systems, critical infrastructure and technology-enabled business initiatives.
• 
  
• Lead cyber governance activities, including the development and management of security policies, standards and procedures.
• Maintain cyber risk registers and oversee risk assessment, mitigation and reporting processes.
• Drive alignment with recognised cyber security frameworks and governance requirements.
• Coordinate internal and external audits, control reviews and remediation activities.
• Oversee identity and access management, privileged access controls and information protection initiatives.
• Develop meaningful cyber metrics, dashboards and executive-level reporting.
• Manage relationships with managed security providers and specialist cyber partners.
• Support cyber incident governance, post-incident reviews and continuous improvement activities.
• Promote cyber awareness and accountability across the organisation.
• Contribute to vendor risk assessments, technology onboarding and third-party assurance processes.
• Support initiatives relating to data governance, privacy and responsible use of technology.
• 
  

Key Experience

• Minimum seven years' experience within cyber security, risk, governance, architecture or assurance-focused role
•