Governance and Assurance Specialist

Working for AMP

Working for AMP means being part of a company that values diverse thinking, encourages collaboration and promotes innovation. It's an environment that offers challenging and exciting work as well as opportunities for professional growth. We're flexible enough to allow you to make the most of your life, both professionally and personally.

We are looking for those that have the courage and agility to navigate changing and complex environments so that we can deliver the best solutions for our customers. We value people with integrity, an innate willingness to help others and an eagerness to perform to the best of their abilities.

We're transforming our business, and we need people like you to join us on this journey.

About the role

The Cyber Governance and Assurance Specialist is responsible for running and improving AMP's internal Cyber Security processes that provide assurance to our stakeholders that their information assets are appropriately secured.

Principally, the role has 4 main functions:

• Governance of our Business Units, ensuring that appropriate assurance activities are performed in a timely fashion.
• Leading the testing activities for our key cyber controls.
• Reporting on the status of our internal controls and services.
• Liaison with internal business stakeholders, advising of risk and recommending appropriate courses of action.

Key Responsibilities

Cyber Governance of AMP Business Units

• Take ownership of the Cyber Governance Framework.
• Continuously improve the service we provide to our customers.
• Manage regular governance forums with senior stakeholders from across the organisation, driving secure and positive outcomes.

Risk Management

• Ensure alignment of business and security through evaluation of business strategies and requirements.
• Support a risk and opportunity-based approach to security services to optimise business outcomes.

Control assurance

• Contribute to the development and review of AMPs control framework.
• Execution of cyber controls testing.
• Assist AMP with cyber compliance obligations.
• Provide assistance to stakeholders with development of exemptions and supporting arguments.

Security Reporting

• Contribute to and take carriage of Quarterly, Monthly and weekly reporting cycles for cyber activities to Heads, Directors, and the Board.

Capabilities & Experience

Experience within information security governance, assurance, risk and / or compliance activities including:

• Experience with Cyber Frameworks such as ISO 2700x or NIST SPF
• Understanding risk management and prioritization of risk.
• Understanding of security control implementations and their ability to meet control objectives and mitigate risks.
• Understanding of penetration testing concepts and methodology.
• Broad understanding of IT Security principles associated with applications, networks, cloud services, cryptography, internet, email, operating systems, databases and malware, with high level expertise/specialisation in several of these fields.
• Frameworks and assessment methodologies for the testing and assessment of Cyber Controls
• Knowledge of vulnerability identification and exploitation.
• Tertiary qualifications within IT, or a related discipline
• CISSP / CISM / CISA etc

Wellbeing & Benefits

As a company that values wellbeing, we offer a range of great benefits to support you financially, professionally and personally. These include access to a wide range of flexible working options including the ability to purchase extra leave, retail discounts, onsite wellbeing centre including a gym (Sydney Office), Employee Assistance Program, competitive home loan rates, leading superannuation contribution, discounted financial advice and personal insurance.

Inclusion & Diversity

AMP recognises individual differences and welcomes people from a variety of life and work experiences. The diversity of our people is core to our ability to innovate, grow and to fulfil our collective aspiration of helping people to own their tomorrow. A natural curiosity, a respect for differences and a growth mindset are valued at AMP.

Applications will be reviewed from 6th of Jan 2021

Advertised: 07 Jan 2021 9:00 AM AUS Eastern Daylight Time
Applications close: 28 Jan 2021 4:30 PM AUS Eastern Daylight Time