What You'll Do

Develop, implement, maintain and continuously improve cyber security policies, procedures, standards and guidelines in line with regulatory requirements, industry standards and recognised security practices.
Lead cyber security risk management activities, including identifying, assessing and prioritising risks, maintaining risk assessments, developing risk treatment and mitigation plans, and reporting security risks to relevant stakeholders.
Lead the planning, preparation and execution of security certification and assurance activities, including SOC 2 and ISO 27001, coordinating audits, evidence collection, documentation, remediation and ongoing compliance.
Conduct security audits, compliance assessments and control reviews to identify security gaps, evaluate control effectiveness and recommend improvements.
Identify and assess security vulnerabilities and control weaknesses across systems, applications and infrastructure, evaluate their associated business risk and coordinate risk-based remediation with engineering and technology teams.
Build and maintain Kinde's cyber security governance framework, including security policies, procedures, controls, risk management processes and supporting documentation.
Develop and maintain appropriate information and system classification requirements to support the prioritisation and implementation of security controls and risk mitigation activities.
Collaborate with engineering, technology, operations and other cross-functional teams to embed security and compliance requirements throughout systems, products and development processes.
Monitor security risks, incidents and control deficiencies, coordinate remediation activities and support security incident investigations and post-incident reporting where required.
Provide practical cyber security guidance to employees and stakeholders and develop security awareness and training initiatives covering security policies, best practices and incident response.
Conduct compliance assessments and support alignment with applicable cyber security, privacy, data protection and regulatory requirements.
Assess privacy risk associated with new and existing systems, products and data processing activities and recommend appropriate security and privacy controls.
Prepare clear security governance, risk, audit and compliance reports for management and relevant stakeholders, including findings, risk treatment activities and recommendations for continuous improvement.
Assess cyber security and privacy risk associated with third-party providers and services and recommend appropriate risk treatment measures.

What You'll Bring

Demonstrated professional experience in Cyber Security Governance, Risk and Compliance (GRC), including security risk assessments, risk treatment and mitigation, compliance assessments and security governance.
Experience developing, implementing and maintaining cyber security policies, procedures, standards and controls aligned with regulatory requirements and recognised industry practices.
Demonstrated experience supporting or leading security audits, assurance and certification activities, particularly ISO/IEC 27001 and SOC 2.
Strong knowledge of cyber security and risk management frameworks, including ISO/IEC 27001 and NIST Cybersecurity Framework, with the ability to translate framework requirements into practical organisational controls.
Experience assessing security control effectiveness, identifying security and compliance gaps and coordinating appropriate remediation activities.
Knowledge and practical experience in privacy, data protection and regulatory compliance, with the ability to translate legal and regulatory requirements into practical information security controls, policies and processes.
Experience developing security governance documentation and providing practical cyber security guidance and awareness to technical and non-technical stakeholders.
Strong stakeholder management and communication skills, with the ability to work collaboratively across engineering, technology, operations and business teams.

Qualifications

Relevant tertiary qualifications in Cyber Security, Information Technology, Information Security, Risk Management, Data Protection, or related discipline.

Desirable

Experience within a SaaS, technology or cloud-based environment.
Experience conducting privacy or data protection risk assessments.
Relevant professional certification or training in ISO 27001, cyber security, risk, audit or privacy.

Why Join Kinde?

Permanent full-time position.
Competitive salary
Flexible and remote working arrangements.
Work closely with technology and engineering teams in a growing SaaS environment.
Supportive and collaborative team culture.

Ready to Apply?

Please submit your CV outlining your relevant cybersecurity governance, risk, and compliance experience. Applicants should demonstrate their qualifications and experience against the position requirements. Successful applicants may be required to complete relevant background and qualification checks.

KINDE

Latest Jobs

Security Specialist Cyber Governance, Risk & Compliance (GRC)