Specialist Cyber Strategic Delivery

Excited to grow your career?

We value our talented workforce, and whenever possible strive to help our employees grow professionally. If you think this position is right for you, we encourage you to speak to your Leader and go ahead and apply!

Our people make all the difference in our success.

We are seeking a highly skilled and detail-oriented Cyber Standards and Reporting Specialist, to join our Cyber Security team. This hybrid role is critical to ensuring compliance with industry cyber security standards and providing timely cyber reporting to both internal and external stakeholders. The ideal candidate will have a deep understanding of cyber security frameworks and reporting methodologies. You will work closely with technical teams, and leaders, to ensure Rio Tinto adheres to and maintains best practices, as well as effectively communicate our cyber security posture through comprehensive reporting. We are looking for someone with a “can do” attitude, who is proactive, highly organised, and has experience developing, implementing and maintaining both cyber security standards and reports.

Key Responsibilities

Cyber security documentation management

• Develop, implement, and maintain cyber security standards, guidance notes and policies in line with industry best practices (e.g., NIST) and Rio Tinto Cyber Security requirements.
• Ensure alignment with legal, regulatory, and contractual cyber security requirements.
• Establish a review process to conduct assessments of existing standards and recommend updates as necessary to address emerging threats and regulatory changes.
• Collaborate with other departments to ensure cyber security standards are incorporated into overall risk management and governance practices.
• Monitor standards and ensures timely updates.
  
  

Reporting and documentation

• Prepare and deliver comprehensive, clear, and concise reports on our cyber security posture, to senior management and stakeholders.
• Assist in the preparation and maintenance of monthly, quarterly, and annual cyber security reports, scorecards and dashboards to visualise and communicate key cyber security metrics for both internal and external parties.
  
  

Collaboration and stakeholder management

• Collaborate with other teams outside of the Cyber Security function to ensure cross[1]departmental alignment on cyber security standards and guidance notes.
• Act as a point of contact for questions related to cyber security standards and reporting within Rio Tinto.
  
  

Continuous improvement

• Stay current on cyber security trends, threats, and changes in regulatory environments to enhance reporting and standards practices, as well as provide recommendations for continuous improvements based on observations.
• Formation of a standard review board within the cyber security function and other teams requiring consultation.
  
  

Required Skills

• Proven experience in developing and maintaining cyber security standards, with a solid understanding of cyber security frameworks in particular NIST CSF
• Strong analytical and problem-solving skills with the ability to manage and prioritise multiple tasks simultaneously.
• Excellent written and verbal communication skills, with the ability to present complex technical topics to non-technical stakeholders.
• Proficiency in data analysis, reporting tools, and creating dashboards (Excel, Power BI, etc.).
• Ability to work independently and as part of a collaborative team environment.
  
  

Preferred Qualifications

• Certifications such as CISSP, CISM, CISA, or similar industry-recognised credentials.
• Experience with cyber security reporting tools or platforms.
• Previous experience working in a cyber security function.
  
  

Why you should apply

• Play a vital role in shaping and strengthening the cyber security posture in a collaborative and inclusive work environment
  
  

Salary Band

Band I

Every Voice Matters

At Rio Tinto, we particularly welcome and encourage applications from Indigenous Peoples, women, the LGBTQIA+ community, mature workers, people with disabilities and people from different cultural backgrounds.

We are committed to an inclusive environment where people feel comfortable to be themselves. We want our people to feel that all voices are heard, all cultures respected and that a variety of perspectives are not only welcome – they are essential to our success. We treat each other fairly and with dignity regardless of race, gender, nationality, ethnic origin, religion, age, sexual orientation or anything else that makes us different.