Principal Advisor Functional Security

• Enable secure, compliant HR technology operations across the People domain

• Contribute to functional security strategy, role design, access governance and control improvement

• Partner across Cyber, Data Privacy, IS&T, People Data & Insights, PEX and Product Groups to align risk, compliance and user experience outcomes

• Permanent Full Time opportunity, Brisbane or Perth, Australia

We’re Finding Better Ways to provide materials the world needs, now and in the future. Our values – care, courage and curiosity – guide how we work and how we treat each other.

About the role

Are you ready to play a pivotal role in strengthening functional security, access governance and compliant people technology outcomes across the People domain?

We are welcoming an experienced functional security professional to join our People Technology team. This role will help ensure that HR technology security strategy, role design, access governance and controls are aligned to data privacy, cyber security and regulatory requirements while enabling a seamless user experience.

We are an open, connected global team that includes some of the industry’s best and brightest minds. We offer competitive, performance-focused remuneration and a wide range of benefits to reward your contribution. With a global reach, the opportunities to develop and grow your career are broad and exciting.

This position will provide specialist functional security expertise across security decisioning, role design, access management, compliance and audit readiness. The Principal will contribute to the functional security roadmap, maintain security role catalogues and control documentation, support BRM and segregation of duties analysis, and translate business and control requirements into clear, testable security outcomes.

Reporting to the Manager HR Process Technology – Cross Functional you will:

• Security Strategy & Governance: Support the development and delivery of the functional security strategy and roadmap, aligned to least privilege, standardisation and global consistency.

• Coordinate with Cyber, Privacy, Technology, Data & Insights and other cross-functional teams to manage security dependencies and maintain horizontal alignment across initiatives.

• Gather stakeholder insights and represent the voice of the customer in security roadmap planning and risk-based decision-making.

• Security Design, Compliance & Audit: Partner with business stakeholders and HR Process Technology leadership to align security solutions with privacy, cyber and regulatory obligations.

• Support smooth implementation and transition of security changes, including Business Role Management (BRM) and Segregation of Duties (SoD) analysis, cross-functional impact assessment, User Acceptance Testing, production sign-off, audit evidence and compliance readiness.

• Identify and implement continuous improvement opportunities for access governance and controls using data insights, trends, feedback, communities and user groups.

• Security Operations, Role Design & Access Management: Translate business and control requirements into documented security requirements with clear acceptance criteria.

• Manage the security backlog so work is clearly defined, refined and prioritised; participate in daily stand-ups, sprint planning, backlog grooming and sprint retrospectives.

• Maintain end-to-end security role catalogues, Business Role Management (BRM) rules, Segregation of Duties (SoD) matrices and supporting documentation.

What you will bring

We are particularly interested in candidates who can demonstrate the following technical strengths, competencies and behaviours:

• Security decisioning: Ability to translate business requirements and risk appetite into actionable security decisions and changes.

• Technology acumen: Platform-agnostic understanding of HR technology security models, with deep Workday HCM security required and ServiceNow HRSD security highly desirable.

• Security role design: Experience designing and optimising role-based access, segregation of duties and least-privilege models.

• Risk and compliance execution: Confidence embedding data privacy, cyber and regulatory controls into HR technology change.

• Testing and quality assurance: Experience supporting security UAT, audit evidence, compliance documentation and production readiness.

• Collaboration and communication: Works effectively across teams and functions, communicates clearly, and adapts messaging for technical and non-technical audiences.

• Analytical and detail-oriented mindset: Uses a systematic approach to examine processes, anticipate requirements, uncover improvement opportunities and maintain high-quality outputs.

• Proactive, risk-aware and learning-focused: Takes initiative, applies structured controls, and demonstrates a continuous learning mindset, including ongoing Workday HCM security capability development.

What we offer

Be recognised for your contribution, your thinking and your hard work, and go home knowing you’ve helped the world progress.

• A work environment where safety is always the number one priority

• A permanent position working directly for Rio Tinto

• A competitive base salary reflective of your skills and experience with annual incentive program

• Comprehensive medical benefits, including subsidised private health insurance for employees and immediate family

• Attractive share ownership plan

• Company provided insurance cover

• Extensive salary sacrifice & salary packaging options

• Career development & education assistance to further your technical or leadership ambitions

• Ongoing access to family-friendly health and medical wellbeing support

• Leave for all of life’s reasons (vacation/annual, paid parental, sick leave)

• Exclusive employee discounts (banking, accommodation, cars, retail and more)

• Possible domestic relocation assistance

Where you’ll be working

The People Function supports 46,000 employees in around 36 countries and operates through global hubs including Brisbane, Perth and Montreal. Within People Technology, this role will work across global business, HR and technology teams to strengthen functional security strategy, optimise role-based access and maintain effective access governance across the employee technology landscape.

Key relationships include IS&T, Data Privacy, the People Domain, People Data & Insights, PEX, Group Services ESPS, Areas of Expertise, Product Groups and Functions, and technology vendors and partners such as Workday, ServiceNow and Accenture.

Applications close 26 July 2026 (Rio Tinto reserves the right to remove advertised roles prior to this date).

#gts

#australia

About Rio Tinto

Rio Tinto is a leading global mining and materials company. We operate in 35 countries where we produce iron ore, copper, aluminium, critical minerals, and other materials needed for the global energy transition and for people, communities, and nations to thrive.

We have been mining for 150 years and operate with knowledge built up across generations and continents. Our purpose is finding better ways to provide the materials the world needs – striving for innovation and continuous improvement to produce materials with low emissions and to the right environmental, social and governance standards. But we can’t do it on our own, so we’re focused on creating partnerships to solve problems, create win-win situations and meet opportunities.

Respect and Inclusion

At Rio Tinto, we particularly welcome and encourage applications from Aboriginal and Torres Strait Islander people, women, the LGBTI+ community, mature workers, people with disabilities and people from different cultural backgrounds.

We are committed to an inclusive environment where people feel comfortable to be themselves. We want our people to feel that all voices are heard, all cultures respected and that a variety of perspectives are not only welcome – they are essential to our success. We treat each other fairly and with dignity regardless of race, gender, nationality, ethnic origin, religion, age, sexual orientation or anything else that makes us different.

R59835