Principal Advisor - Cyber Security Risk & Advisory

Principal Advisor - Cyber Security Risk & Advisory

• Great opportunity to join a global organisation at the forefront of mining
• Opportunity to influence the way that Rio Tinto manages its cyber risk across both IT and OT environments
• Work in a flexible work environment where we prioritise a healthy work/life balance
• Permanent role based in Perth

About the role

We are looking for a Principal Advisor - Cyber Risk & Advisory to join a global team to contribute to the improvement of Rio Tinto’s cyber security posture through leading cyber security risk assessments and the provision of pragmatic cyber security guidance for identified risks and controls.

This role forms part of a team within Rio Tinto’s Cyber Security function. It has a clear focus on providing cyber security risk advice and guidance in a practical business context to enable continued innovation and support of Rio Tinto’s digital mining future. This role is a great opportunity to provide security leadership across a broad range of technologies, from legacy systems to state of the art industrial automation solutions.

Reporting to the Cyber Risk Lead, APAC West, and working in a collaborative, and supportive environment within our high performing global Cyber Security team, you will be responsible for:

• Acting as an internal subject matter expert for cyber security risk related to IT and OT environments and conduct knowledge transfer within the local and broader Cyber Security teams
• Providing effective and pragmatic cyber security guidance for key IT and OT technology projects, enabling the organisation to innovate securely by design
• Providing specialist advice in the definition, application and communication of Cyber Security standards and guidance
• Providing mentoring and guidance for junior staff
• Leading cyber security risk assessments of new and existing technologies to identify risks, and identify appropriate controls that balance security and operability
• Leading and supporting the execution of cyber security deep dives and risk diagnostics targeting key functions, technologies and systems within the Rio Tinto landscape
• Communicating risk assessment findings to both technical and non-technical audiences, including relevant senior leaders within the organisation
• Identifying mitigating controls for novel and complex risk assessments
• Contributing to the delivery of the cyber security strategy
• Building and maintaining key stakeholder relationships

What you’ll bring

• A commitment to the safety and wellbeing of yourself and the team
• Several years of industry experience, preferably in a large organisation, or similar asset intensive industry
• Exceptional problem-solving skills and critical business thinking
• Strong familiarity and demonstrable experience with leading cyber security frameworks for identifying and managing cyber security risk (e.g. NIST, ISO, NERC CIP, ISA/IEC etc.)
• Exceptional interpersonal, communication and influencing skills to build credibility and collaboration
• Experience communicating technical concepts to a range of audiences including non-technical and senior stakeholders
• Strong experience with both enterprise networks/systems and/or Industrial Control System (ICS) technologies
• Deep knowledge and experience in a breadth of cyber security domains

What we offer

Be recognised for your contribution and go home knowing you’ve helped the world progress.

• A work environment where safety and mental health is always the number one priority.
• Flexible work from home arrangements, we value work-life balance.
• Competitive base salary plus annual incentive program.
• Comprehensive medical benefits including fully subsidised private hospital insurance for employees and immediate family.
• Attractive employee share scheme.
• Extensive salary packaging options
• Career development and education assistance to further your technical or leadership ambitions.
• Ongoing access to family-friendly and health and medical wellbeing support
• Leave for all of life’s reasons (vacation/annual, paid parental, sick leave).
• Exclusive employee discounts (banking, accommodation, cars, retail and more).

About Rio Tinto

Rio Tinto is a leading global mining and materials company. We operate in 35 countries where we produce iron ore, copper, aluminium, critical minerals and other materials needed for the global energy transition and for people, communities, and nations to thrive. We have been mining for almost 150 years and operate with knowledge built up across generations and continents. Our purpose is finding better ways to provide the materials the world needs – striving for innovation and continuous improvement to produce materials with low emissions and to the right environmental, social and governance standards. But we can’t do it on our own, so we’re focused on creating partnerships to solve problems, create win-win and meet opportunities.

Where you will be working

Rio Tinto Information Systems and Technology (IS&T) operates to enable better alignment with customer priorities, end-to-end accountability and flexibility to prioritise critical work. The function provides solutions that are aligned with current and future business requirements through the development and ongoing delivery of IT strategy and solution roadmaps. Through appropriate governance, consultative processes, and the use of industry best practices, IS&T also ensures that emerging technologies and innovative ideas are constantly evaluated, considered, and adopted, to provide easy-to-use, best-in-class solutions and services.

Every Voice Matters

At Rio Tinto, we particularly welcome and encourage applications from Aboriginal and Torres Strait Islander people, women, the LGBTI+ community, mature workers, people with disabilities and people from different cultural backgrounds.

We are committed to an inclusive environment where people feel comfortable to be themselves. We want our people to feel that all voices are heard, all cultures respected and that a variety of perspectives are not only welcome – they are essential to our success. We treat each other fairly and with dignity regardless of race, gender, nationality, ethnic origin, religion, age, sexual orientation or anything else that makes us different.