Information Security Manager

at  Technology People Australia

A Victorian not for profit organisation in the healthcare space has a newly created role for an Information Security Manager to take ownership of their Cyber GRC program.
Reporting directly to the CISO this (second in command) role will see you creating an information security GRC program to safeguard the assets of this healthcare business.
This role is at the start of a 3 year program of work.

• Drive the implementation and enhancement of cyber security controls and security systems
• Run the information security risk management program (i.e. identification, classification, remediation)
• Perform regular risk assessments of IT, OT, IoT systems
• Oversee the management of third-party IT risk portfolio.
• Perform controls assessments
• Implement cyber educational awareness program
• Manage and respond to audit actions
• Run and uplift the security operations function
• Mentor a security engineer