We deliver power to Tasmanians. Our vision is to be trusted by our customers to deliver today and create a better tomorrow.
We own, operate and maintain the electricity transmission and distribution network in Tasmania. We deliver a safe, cost-effective and reliable electricity supply to more than 295,000 residential, commercial and industrial customers. We facilitate the transfer of electricity between Victoria and Tasmania via Basslink, the sub-sea electricity interconnector. We also provide telecommunications and technology services.
About the role
Lead the future of cyber resilience at TasNetworks
At TasNetworks, we're committed to delivering safe, reliable and sustainable energy to Tasmanians. As cyber threats continue to evolve, we're strengthening our cyber security capability to protect critical infrastructure, support regulatory compliance and enhance organisational resilience.
We're seeking an experienced Cyber Governance, Risk & Compliance (GRC) Lead to lead our cyber governance function and play a critical role in shaping TasNetworks' cyber security maturity and risk posture.
Reporting to the Cyber Security leadership team, you will be accountable for leading TasNetworks' Cyber Governance, Risk and Compliance function. You'll provide strategic governance leadership, risk insights, compliance oversight and assurance activities that support executive decision-making and drive continual improvement across the organisation.
This is a highly influential role that partners with business leaders, asset and system owners, and technology teams to ensure cyber security risks are effectively managed and regulatory obligations are met.
Key responsibilities
As the Cyber GRC Lead, you will:
- Lead the development and continuous improvement of cyber security governance, risk and compliance frameworks.
- Develop and maintain cyber security policies, standards, procedures and governance artefacts aligned with industry frameworks and regulatory obligations.
- Provide guidance and trusted advice to business stakeholders, asset owners and system owners on cyber security obligations and risk management practices.
- Assess, measure and report on cyber security maturity using recognised industry frameworks and models.
- Facilitate cyber security compliance reviews, control assurance activities and maturity assessments.
- Develop cyber governance reporting, key risk indicators (KRIs), key performance indicators (KPIs) and executive-level insights.