Cyber Control Assurance Manager

We’ve been trusted to serve Aussie communities since 1914 and grown to become a top 30-listed on the ASX with over 115,000 team members and a portfolio of iconic brands. At Coles Group, you’ll not only get to make a difference to millions of Aussie lives—you’ll also get to see your impact.

About the team

Technology is the backbone of our business. Every day, our team solves complex and meaningful problems. Those solutions help thousands of our fellow team members succeed and make millions of customers lives easier every day.

The Group Cyber team is accountable for all aspects of Cyber Security across Coles including Strategy & Architecture, Identity, Cyber Governance, Cyber Detection & Response, Data Protection and Security Services. This role will be based within the Cyber Governance team and will play an active role in uplifting Coles’ Governance and Assurance  t services for Coles team members, suppliers and partners.

About the role

Directly reporting to our Technical Assurance and Automation Delivery Manager this is a pivotal role, responsible for leading Coles’ Information Security Control Assurance Program. From maintaining compliance and ensuring Coles’ technology and business units are embedding cyber maturity through independent control testing, through to building automation where possible.

As the Cyber Control Assurance Manager, you can expect to:

• Design and execute a comprehensive control assurance program to assess the effectiveness of cybersecurity controls across the organisation.
• Develop and maintain key process and procedural documentation including Standard Operating Procedure, Terms of Reference, and other applicable artifacts supporting the Control Assurance Program.
• Review and test the design and operating effectiveness of controls across the organisation to identify potential risks and control gaps.
• Develop and execute testing plans and procedures to confirm control effectiveness and identify areas for improvement.
• Coordinate and conduct control testing activities, including control walkthroughs, sampling and validation of evidence, to verify the effectiveness of implemented controls.
• Analyse test results to identify root causes of control deficiencies and provide recommendations for remediation.
• Collaborate with business units to understand their processes and control frameworks and provide guidance and education on best practices for control design and implementation.

About you & your skills

You are passionate about driving change to build cyber maturity through assurance activities and with a curious mindset.    

As part of your toolkit, you will have:

• Experience across multiple Information Security and related Technology Assurance roles.
• 2+ years leading a Control Assurance Program
• Practical hands-on experience developing and executing on Control Assurance Programs, including but not limited to having awareness of control design principles, attributes, and testing requirements. 
• Knowledge of Information Security framework requirements, industry & best practice standards
• Knowledge of Operational risk management and compliance processes, including the management of risk appetite statements and key risk indicators.
• Experience executing assessments and management of regulatory, systems (application) compliance requirements.
• Working knowledge of GRC products/toolsets
• Relevant security certifications beneficial such as CISA, CISM, CISSP, SASA, ISO27K or related IT Governance certifications such as COBIT

What’s in it for you?

• Flexible working options: We know that work is only one part of your life, so we actively encourage a positive work-life balance and provide hybrid working options to help you achieve it.
• Office perks: Take advantage of our gym facility and fitness classes, free parking, BBQ area, mini-Coles supermarket, fooderie hub where you can sample new products before they hit the shelves, school holiday program and so much more when you come in.
• Discounts: Eligible team members receive 5% discount all year round on your Supermarket and Liquor online and in-store purchases. We also offer additional periods of double discount (10%) at various times throughout the year. As well as hotdeals exclusive to team members that translate into additional savings.
• Reward through recognition: Give and receive recognition, linked to our Coles values, through our digital recognition platform ‘mythanks’. You can accumulate points to redeem in the online shop for exciting gifts and electronic gift cards from an extensive range of retailers.
• Opportunities for learning and development: No matter where you start within our diverse business, you’ll have experiences, exposure, and education to satisfy you. Discover and explore a variety of career development programs and job-specific training.
• Paid parental leave: We understand how important your life outside work is and offer permanent team members paid parental leave to support you in balancing work and family.
• Investment in your future: Our annual team member share plan offer allows eligible team members to make regular pre-tax salary sacrifice deductions to purchase Coles Group shares.

About the recruitment process

We’re continuing to build a gender equitable team, and a culture that is just as diverse, inclusive and welcoming as the communities we serve. We are committed to creating a workplace that is safe and respectful for our team. We encourage applications from people of all ages, cultures (including Aboriginal and Torres Strait Islander peoples), abilities, sexual orientation and gender identities.

We’re happy to adjust our recruitment process to support candidates with disability. For further information and additional contact details visit the ‘Our Recruitment Process’ section of our careers site or email inclusionrecruitment@coles.com.au

Job ID: 132904

Employment Type: Full time