Principal Adviser Cyber Risk & Advisory

• Influence how Rio Tinto manages cyber risk across Information Technology and Operational Technology environments, helping enable safe and secure digital innovation 
• Lead organisation-wide cyber risk assessments, strategic advisory activities and continuous improvement initiatives while building trusted relationships with senior stakeholders across the business 
• Permanent Brisbane-based opportunity with flexible work arrangements, global exposure and occasional travel across Rio Tinto operations and commercial locations 

We’re Finding Better Ways™ to provide materials the world needs, now and in the future. Our values – care, courage and curiosity – guide how we work and how we treat each other. 

About the role 

We are looking for a Principal Adviser – Cyber Risk & Advisory to help our global Cyber Security team strengthen Rio Tinto’s cyber security posture across both Information Technology (IT) and Operational Technology (OT) environments. In this role, you’ll provide expert cyber risk guidance that supports innovation, operational resilience and secure technology adoption across the business. This is a great opportunity for someone who enjoys solving complex cyber security challenges, influencing decision makers and shaping risk outcomes across a diverse technology landscape. 

What you’ll be doing 

Reporting to the Senior Manager of Cyber Risk & Advisory and working in a high-performing, collaborative and globally connected Cyber Security team, you will: 

• Lead cyber security risk assessments for new and existing technologies, including complex and emerging use cases 
• Provide pragmatic cyber risk advice and security guidance to IT and OT projects, balancing security, operational requirements and business outcomes 
• Act as a trusted subject matter expert on cyber risk, helping technical and non-technical stakeholders understand and manage risk effectively 
• Drive targeted risk deep-dive and diagnostic programs to identify, assess and improve cyber security controls across the organisation 
• Build strategic relationships with stakeholders across operations, enterprise functions and external technology partners 
• Influence the adoption of cyber security standards, procedures and governance frameworks across the business 
• Lead continuous improvement initiatives that strengthen Cyber Risk & Advisory practices, processes and outcomes 
• Mentor and positively influence colleagues while demonstrating visible leadership without direct people management responsibility 

About you 

We’re looking for someone whose experience aligns with the key requirements below. You do not need to meet every “helpful for success” item to apply. If you bring relevant experience and are excited by the opportunity, we encourage you to submit an application. 

Required for Success 

• A commitment to the safety of yourself and your team 
• Demonstrated ability to assess, communicate and manage cyber security risk across complex IT and/or Operational Technology environments, translating technical risks into practical business outcomes 
• Experience leading cyber risk assessments, advisory engagements or cyber governance activities within a large organisation, consulting environment or other complex industry setting 
• Proven ability to influence senior stakeholders, build trusted relationships and drive outcomes across diverse business functions 
• Degree qualification in Cyber Security, Information Technology, Engineering, Computer Science or a related discipline 
• Working knowledge of recognised cyber security frameworks and standards such as NIST, ISO 27001, ISA/IEC 62443, NERC CIP or similar 

Helpful for Success 

• Experience supporting mining, resources, industrial, or other safety-critical and complex operating environments 
• Exposure to both Information Technology and Operational Technology security risk management 
• Relevant industry certifications such as CISSP, CISM, CRISC, GICSP or similar 
• Experience leading proactive risk diagnostic or assurance programs 

What we offer 

Be recognised for your contribution, your thinking and your hard work, and go home knowing you’ve helped the world progress. 

• A work environment where safety is always the number one priority 

• A permanent position working directly for Rio Tinto 

• A competitive base salary reflective of your skills and experience with annual incentive program  

• Comprehensive medical benefits including subsidised private health insurance for employees and immediate family                

• Attractive share ownership plan 

• Company provided insurance cover 

• Extensive salary sacrifice & salary packaging options 

• Career development & education assistance to further your technical or leadership ambitions  

• Ongoing access to family-friendly health and medical wellbeing support  

• Leave for all of life’s reasons (vacation/annual, paid parental, sick & cultural leave) 

• Exclusive employee discounts (banking, accommodation, cars, retail and more) 

Where you’ll be working 

Information Systems and Technology (IS&T) is a global function delivering integrated and critical IT services and support to Rio Tinto’s mines, refineries, smelters, remote operations centres and corporate offices. IS&T’s mission is to power Rio Tinto’s pioneers with data and technology, enhancing safety, productivity, and value for the business. Through our collaborative partnerships and a deep understanding of our mining and metals business, IS&T carefully balances the implementation of ‘here and now’ solutions with emerging technologies that will help to create the digitally-optimised Rio Tinto of tomorrow.    

About Rio Tinto

Rio Tinto is a leading global mining and materials company. We operate in 35 countries where we produce iron ore, copper, aluminium, critical minerals, and other materials needed for the global energy transition and for people, communities, and nations to thrive.

We have been mining for 150 years and operate with knowledge built up across generations and continents. Our purpose is finding better ways to provide the materials the world needs – striving for innovation and continuous improvement to produce materials with low emissions and to the right environmental, social and governance standards. But we can’t do it on our own, so we’re focused on creating partnerships to solve problems, create win-win situations and meet opportunities.

Respect and Inclusion

At Rio Tinto, we particularly welcome and encourage applications from Aboriginal and Torres Strait Islander people, women, the LGBTQ+ community, mature workers, people with disabilities and people from different cultural backgrounds.

We are committed to an inclusive environment where people feel comfortable to be themselves. We want our people to feel that all voices are heard, all cultures respected and that a variety of perspectives are not only welcome – they are essential to our success. We treat each other fairly and with dignity regardless of race, gender, nationality, ethnic origin, religion, age, sexual orientation or anything else that makes us different.

R65235