Senior Risk Advisor - Information Services

At GHD, we don’t just believe in the power of commitment, we live and breathe it every day

That’s why we pledge to support and empower all of our people to make a positive impact when working with the right technology and training as you bring ideas and projects to life. 

Together with your colleagues, clients and partners, you'll make an impact that is felt by all. See where your commitment could take you. 

Who are we looking for?

We’re looking for a Senior Risk Advisor to join our Information Services (IS) Risk & Compliance team in either Melbourne or Brisbane. 

As part of the Information Services Risk & Compliance team, this role leads and uplifts the maturity of the Information Services risk management practice, with a focus on technology, supply chain and third-party risk. This is an excellent opportunity for an experienced risk professional to apply strong judgment, shape risk-based decision-making, and deliver high-quality oversight and advisory services on material risks. 

In this senior, high-impact role, you will:

• Act as a trusted advisor to senior Information Services (IS) and business leaders, shaping risk-informed decision-making and influencing outcomes across a complex, global environment.
• Lead the delivery of IS risk management activities, providing clear, actionable insights, reporting and recommendations that directly support strategic and operational priorities.
• Build and leverage strong, enterprise-wide relationships to drive a culture of accountability, transparency and pragmatic risk management across IS and the broader GHD business.
• Embed risk management into planning and delivery by influencing business plans, key initiatives and investment decisions, ensuring alignment with GHD’s risk appetite and strategic objectives.
• Proactively assess the evolving threat landscape and regulatory environment, translating emerging risks into strategic insights and clear, prioritised actions for senior stakeholders.
• Lead the end-to-end risk lifecycle across the IS environment, including risk identification, assessment, control mapping, treatment planning and oversight of remediation delivery.
• Provide leadership and direction across major initiatives and projects, ensuring risk considerations are effectively embedded and managed throughout delivery.
• Continuously improve risk management practices, tooling and reporting to enhance visibility, maturity and business value at an enterprise level.
• Maintain and deepen subject-matter expertise in technology risk and compliance, contributing to capability uplift across the team and serving as a point of reference for complex risk matters.
  
   

What would you bring to the team? 

• 10+ years’ experience in technology risk, information security or compliance
• Relevant certifications such as CRISC, CISA, CISSP, CISM or ISO 27001
• Degree in Information Systems, Cyber Security, Risk, Business or a related field (highly regarded)
• Experience in large, complex or global environments (highly regarded)
• Strong experience in information security and technology risk management
• Demonstrated expertise in third-party and supply chain risk management
• Deep understanding of frameworks such as ISO/IEC 27001, NIST or similar
• Proven ability to lead risk assessments and drive remediation outcomes
• Strong analytical skills, with the ability to translate technical issues into business risk
• Excellent stakeholder engagement, communication and influencing capability

Interested? Apply now.

GHD is an equal opportunity employer, and we want everyone to be able to fully participate in our recruitment process. We value a diverse workforce and an inclusive culture. We encourage applications from Aboriginal and Torres Strait Islander peoples and people of all identities. 

GHD embraces hybrid work arrangements to create a work environment focused on well-being, flexibility, and productivity where our people can thrive. This supports the diverse needs of our workforce while balancing the benefits of remote working with the value of face-to-face collaboration in the office. 

We respectfully ask that no agency resumes be presented at this stage. 
 
#LI-JW1   
#LI-Hybrid