Cyber Security Business Partner (BISO)

• Hybrid Sydney CBD
• Permanent full time

About the role

At Avant, we are looking for an experienced and commercially minded security leader to become the trusted link between our business and Information Security teams. As Security Business Partner, you'll work closely with senior stakeholders to embed security into the way we operate, ensuring business objectives are achieved while security risks are effectively managed.

Acting as a strategic advisor, you'll translate complex security requirements into practical business outcomes, influence decision-making, and champion the adoption of security controls across projects, operations, and change initiatives. This is a highly visible role where you'll help drive a secure-by-design culture and strengthen risk management across the organisation.

Key accountabilities:

• Act as the key security partner to Business CIOs, COOs and senior leaders, providing strategic advice and guidance.
• Embed security into projects, operations and business decision-making through secure-by-design principles.
• Conduct Threat Risk Assessments (TRAs) and Security Solution Assessments (SSAs) to identify and mitigate risks early.
• Drive consistent implementation of security controls, vulnerability remediation and audit actions across the business.
• Support cyber simulations, penetration testing activities and incident readiness.
• Partner with risk teams to develop risk profiles, mitigation strategies and compliance reporting.
• Lead cybersecurity awareness initiatives and promote a strong security culture.
• Oversee vendor security compliance and governance obligations.
• Contribute to executive and Board-level reporting on security posture and key risks.

Skills and experience required:

• Proven experience in Information Security, with strong expertise in risk management, governance and stakeholder engagement.
• Demonstrated ability to translate technical security concepts into clear business language.
• Experience conducting Threat Risk Assessments and working with recognised security frameworks.
• Strong understanding of APRA CPS 230, CPS 234, NIST, ISO 27001 and related regulatory frameworks.
• Relevant qualifications such as CISSP, CISM, CRISC or equivalent.
• A collaborative, pragmatic approach with the ability to balance business outcomes and security risk.
• Previous experience as a Security Architect would be highly regarded.

Why Avant?

Join an organisation where security is viewed as a strategic business enabler, not just a technical function. You'll work closely with executive leaders, influence critical business decisions, and help strengthen the security posture of a purpose-led organisation that supports healthcare professionals across Australia.

For further information, please contact Sue Allen, Talent Acquisition Business Partner on 0429 404 856.