Principal Adviser Cyber Risk & Advisory

Rio Tinto
Brisbane
Workplace: OnsiteFull timeFunction: Consulting & AdvisorySkills: ["Stakeholder influence","Risk communication","Leadership","Trusted relationship building","Continuous improvement"]

Lead organisation-wide cyber risk assessments and provide expert advisory guidance to strengthen cyber security across both IT and OT environments. Partner with senior stakeholders to translate complex cyber risks into practical outcomes, drive risk deep-dives and diagnostics, and improve governance across standards and procedures. Join a globally connected cyber security team, influencing secure technology adoption and operational resilience through continuous improvement and trusted risk leadership.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Rio Tinto
Rio Tinto
7 hours ago

Principal Adviser Cyber Risk & Advisory

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 7 hours agoStatus: Live

Job Summary

Lead organisation-wide cyber risk assessments and provide expert advisory guidance to strengthen cyber security across both IT and OT environments. Partner with senior stakeholders to translate complex cyber risks into practical outcomes, drive risk deep-dives and diagnostics, and improve governance across standards and procedures. Join a globally connected cyber security team, influencing secure technology adoption and operational resilience through continuous improvement and trusted risk leadership.
Location: Brisbane
Workplace: Onsite
Employment Type: Full time
Job Function: Consulting & Advisory
Seniority: Mid level

Key Responsibilities

  • •Lead cyber security risk assessments for new and existing technologies, including complex and emerging use cases.
  • •Provide pragmatic cyber risk advice and security guidance to IT and OT projects, balancing security, operational requirements and business outcomes.
  • •Act as a trusted subject matter expert on cyber risk to help technical and non-technical stakeholders understand and manage risk effectively.
  • •Drive targeted risk deep-dive and diagnostic programs to identify, assess and improve cyber security controls across the organisation.
  • •Influence adoption of cyber security standards, procedures and governance frameworks while mentoring colleagues and strengthening Cyber Risk & Advisory practices.
Travel: Low travel

Pay and Benefits

Equity and Bonus:Equity
Perks:Health InsuranceEquity

Key Requirements

  • •Demonstrated ability to assess, communicate and manage cyber security risk across complex IT and/or Operational Technology environments, translating technical risks into practical business outcomes.
  • •Experience leading cyber risk assessments, advisory engagements or cyber governance activities within a large organisation, consulting environment or other complex industry setting.
  • •Proven ability to influence senior stakeholders, build trusted relationships and drive outcomes across diverse business functions.
  • •Degree qualification in Cyber Security, Information Technology, Engineering, Computer Science or a related discipline.
  • •Working knowledge of recognised cyber security frameworks and standards such as NIST, ISO 27001, ISA/IEC 62443, NERC CIP or similar.
Education:
Skills:Stakeholder influenceRisk communicationLeadershipTrusted relationship buildingContinuous improvement
Certifications:CISSPCISMCRISCGICSP
Tech Stack:NISTISO 27001ISA/IEC 62443NERC CIP

Company Brief

Rio Tinto
Global mining and metals company that explores, mines, processes, and markets mineral resources including iron ore, aluminum, copper, and lithium. Supplies raw materials to industries worldwide across energy, infrastructure, transportation, and manufacturing.
Industry: Mining & Metals
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 1873
WebsiteLinkedIn