Cyber, Risk and Assurance Lead

About Us

The G’day Group comprises three leading Australian tourism brands in Discovery Parks, G’day Parks and loyalty program G’day Rewards. Employing more than 2,500 people Australia-wide, G’day Group has a truly national footprint of over 300 holiday parks, including 90 fully owned and operated parks and Resorts. The largest park network in the country, we’re about authentic Australian holiday experiences and inviting all Aussies to say g’day to more of Australia.

We’re on a journey of growth and evolution to reshape the industry, offering the best customer experience underpinned by the best technology. Each year, we showcase the true Australia to millions of guests and we are the co-custodians of some of the country’s most treasured places; a privilege we don’t take lightly. With eyes on domestic and regional tourism like never before, we are building a passionate, adaptable, high-performance team to create holiday memories that put a smile in every g’day. 

Cyber, Risk & Assurance Lead

Drive enterprise security. Strengthen risk governance. Influence strategic outcomes.

We are seeking an experienced Cyber, Risk & Assurance Lead to provide strategic oversight of the organisation’s cyber security, enterprise risk, and assurance capability.

This critical role ensures cyber and technology risks are effectively identified, managed, and reported within the Enterprise Risk Management (ERM) framework, while providing independent assurance to Executive leadership and the Board on cyber controls, regulatory compliance (including PCI DSS), and overall security posture.

Working closely with Technology, Finance, Risk, Internal Audit, and operational leaders, you will help embed a strong risk culture and uplift assurance maturity across the enterprise.

Key Responsibilities

• Integrate cyber security into the Enterprise Risk Management framework.
• Develop and maintain cyber risk and governance frameworks aligned to ISO 27001, NIST CSF, and PCI DSS.
• Lead enterprise cyber risk assessments and maintain the cyber risk register.
• Deliver clear risk reporting and insights to Executive and Board stakeholders.
• Oversee cyber governance, policies, standards, and regulatory compliance obligations.
• Lead PCI DSS governance, assessments, and remediation activities.
• Coordinate internal and external audits and execute a risk-based assurance program.
• Provide governance oversight across key technical security domains.
• Manage third-party cyber risk processes and vendor assurance.
• Support organisational resilience through alignment with business continuity and disaster recovery.

About You

• Experience in Cyber Security, Risk, GRC, or Assurance roles.
• Strong experience with ERM integration, audit coordination, and compliance programs.
• Working knowledge of ISO 27001, NIST CSF, PCI DSS, and security control frameworks.
• Ability to translate technical risk into business insights for senior stakeholders.
• Relevant qualifications in Cyber Security, IT, Risk, or similar (CISM, CISSP, CRISC or equivalent preferred).Top of FormBottom of Form

Benefits

• Health and Wellbeing – Flexible and hybrid working arrangements / Employee Assistance Program / Discounted private health cover / BeWell Training Program / Weekly yoga and walking group / Free annual flu vaccinations
• Paid Leave Benefits – Parental leave / Volunteer leave / Study leave 
• Professional Development – Leadership programs / Support of external training courses / Reimbursement of professional association memberships
• Employee Savings – Discounted accommodation and experience rates / Salary packaging / Discovery partner discounts/ Free G’day Rewards membership / Loyalty recognition benefits

Our ESG statement

The G’day Group acknowledges the increasing global expectation to demonstrate our approach to Environmental, Social and Governance (ESG) risk factors and sustainability in our daily operations and ongoing decision making. Our five-year ESG strategy is evolving to ensure we are committed to growing with care through supporting our people, giving back to the communities we operate in, and protecting our environment.

Conditions of Employment

Prior to an offer of employment being made, candidates must provide authority for a Federal Police Clearance to disclose any criminal offences or charges. Drivers License essential.