Senior Cyber Security Business Partner

Key Accountabilities Lead the Team

• Lead and develop a team of Information Security Business Partners.
• Drive a consistent approach to security engagement, assessments, controls and reporting across all business units.
• Own and evolve Avant's Cyber Security Awareness Program.
• Lead the Security Solution Assessment (SSA) process and security policy framework.
• Foster a culture of collaboration, accountability and continuous improvement.

Strategic Alignment

• Act as the primary security adviser to senior business and technology stakeholders.
• Conduct Threat Risk Assessments (TRAs) and Security Solution Assessments (SSAs) for new initiatives.
• Ensure security risks are identified early and managed effectively.
• Support cyber simulations, penetration testing activities and remediation programs.
• Align security outcomes with business objectives and regulatory requirements.
• Drive secure-by-design principles across projects and business initiatives.

Champion Security

• Build strong relationships between Information Security and business teams.
• Translate complex security concepts into practical business guidance.
• Promote adoption of enterprise security controls and awareness initiatives.
• Support business units in managing emerging risks and security challenges.

Governance

• Oversee vendor security governance and compliance requirements.
• Support Board and executive reporting on security posture and key risks.
• Drive consistency in policy, standards and regulatory compliance activities.

Key skills and experience required:

• Extensive experience in Information Security, risk management and governance.
• Proven leadership experience managing and developing high-performing teams.
• Strong experience conducting Threat Risk Assessments using frameworks such as STRIDE, PASTA or DREAD.
• Relevant certifications including CISSP, CISM, CRISC or equivalent.
• Strong knowledge of APRA CPS 230, CPS 234, NIST and ISO 27001.
• Ability to communicate complex technical concepts to executive and non-technical audiences.
• Experience influencing senior stakeholders and driving business-focused security outcomes.
• Knowledge of security architecture and secure-by-design principles.

Preferred Capabilities:

• MBA, GAICD or similar qualifications.
• Experience in healthcare, insurance or other regulated industries.
• Exposure to AWS, Azure or Google Cloud environments.

About Avant

Avant is Australia's leading medical defence organisation, proudly supporting medical professionals for over 130 years. With more than 90,000 members, including health practitioners and medical students across every state and territory, we provide trusted, market leading products and services tailored to their professional, personal, and practice needs.

Join an organisation with purpose, one that genuinely exists to support its members and improve healthcare in Australia. You'll work with committed, passionate colleagues in an environment that values both rigour and collaboration.

Equal Opportunity Employer

Avant supports doctors so they can serve Australia's diverse communities. Having diversity in our workforce brings valuable perspectives and strengthens our ability to support healthcare professionals.

We therefore welcome applications from people of all backgrounds, including Aboriginal and Torres Strait Islander peoples, people from culturally diverse communities, LGBTQIA+ individuals, people with disabilities, and those with caring responsibilities.

Our inclusive workplace is somewhere everyone can succeed.