Job Description
Full job description
About Us
At Sportsbet, we’re united behind our purpose to Bring Excitement to Life for over 2.4 million customers. We do this by delivering fun, challenging the status quo, and living our values. As part of the global Flutter Group, we’re a major player internationally, but in Melbourne, Sydney and Darwin, we’re a tightknit team of 1,300+ teammates (with over half in Tech & Data Science).
Our commitment to responsible gambling is genuine and demonstrated through the wide range of responsible gambling initiatives and tools. We’re proud to be the leaders in responsible gambling in our industry, not just locally, but globally.
We are one of the top workplaces for Women through WORK180. WORK180 is a leading platform that independently assesses employers on policies, benefits and practices that support women and underrepresented groups at work. We remain committed to making Sportsbet the best place to work and encourage you to explore our employer profile on the WORK180 website to learn more about what we offer.
About The Role
Reporting into the Head of Cyber GRC, you will help design, operate and continuously improve Sportsbet’s cyber assurance and risk management activities. You will assess cyber risks and controls, perform control design and operating effectiveness testing, and provide clear, practical advice that helps Technology and Business teams reduce risk while delivering outcomes.
Working alongside and guided by a Senior Cyber GRC Specialist this role has a strong focus on implementing and running a controls assurance and risk management program aligned to the NIST Cybersecurity Framework. You will also assist with external certifications, security awareness, and third-party reviews, partnering with stakeholders across Technology, Risk & Compliance, and the wider business.
Responsibilities Include:
Executing a risk-based cyber controls assurance plan aligned to NIST CSF v2.
Assessing control design and operating effectiveness across systems, applications, processes and IT General Controls (ITGCs).
Working closely with a UK-based team to manage cyber security reviews for new vendors.
Contributing to security awareness activities which includes conducting security awareness training and assisting with creating content.
Managing control deficiencies end-to-end: validation, logging, risk assessment, remediation planning, closure and risk acceptances.
Leveraging automated assurance tooling (e.g., control monitoring, compliance checks, evidence collection) to improve assurance coverage and reduce manual effort.
About You
While we are big on development and offer on the job training, we want to set you up for success. Along with a great attitude, it would be ideal that you have:
Working knowledge of cyber risk management, control design, and evidence-based testing.
Proven experience in cyber controls assurance (e.g., advisory, internal, or external audit roles).
Good knowledge of industry practice such as NIST, COBIT, ISO27001, or PCI-DSS is beneficial.
Strong analytical skills with attention to detail and an ability to see the bigger risk picture.
Clear communicator who can tailor messages for technical and non-technical audiences.
Collaborative and relationship-focused, with the confidence to work independently and as part of a broader team
The Perks
We work hard and play hard, so along with a competitive salary and generous performance-based bonus for permanent staff members, here’s some of our other perks:
25 days annual leave (that’s right, an additional week’s leave!)
Hybrid working policy (Monday and Friday from home) and a $1,050 home office allowance for new starters.
Industry leading Parental Leave support program with 26 weeks paid leave for Primary Carers and no wait time. We also have a progressive return to work benefit for your first 6 months back: come back for 3 days, get paid for 4; come back for 4 days, get paid for 5.
Hack Days - where your creativity and collaborative ideas lead to exciting new ideas and projects for our customers.
Access to outstanding career development programs, including expert-led internal training and external learning opportunities (staff allowance for personal development)
Weekly concierge service including free massages and nail appointments – all onsite in our Melbourne office!
Free breakfast, daily fresh fruit and weekly rotating socials, from Thursday office drinks to fun team events
End of trip facilities with onsite table tennis and pool tables
Discounted health insurance and free flu jabs yearly.
We review applications within the first two weeks, so apply now! Check out our Life@Sportsbet Instagram, LinkedIn, and careers website for more information about our inclusive culture.
Our Focus on Diversity, Equity & Inclusion
We don’t just support diversity – we celebrate it! This is a workplace where you can thrive and feel safe to bring your whole authentic self to work.
What’s the Green Tick Feeling?
Well, it’s different for everyone, yet unites us all. It’s the feeling you get when you succeed, no matter what success looks like to you. It's all the little and big things that make you feel like you’re thriving when working at Sportsbet.
We’re an inclusive employer who welcomes you for who you are, as you are – so, if you require adjustments to the recruitment process, please let us know in your application. We also know flex means different things to different people, so let us know how we can support you to be your best.
If you think you’d be a great fit but don’t necessarily meet everything in the job description, please still get in touch.
Ready to bring excitement to life? Apply now
About Us
At Sportsbet, we’re united behind our purpose to Bring Excitement to Life for over 2.4 million customers. We do this by delivering fun, challenging the status quo, and living our values. As part of the global Flutter Group, we’re a major player internationally, but in Melbourne, Sydney and Darwin, we’re a tightknit team of 1,300+ teammates (with over half in Tech & Data Science).
Our commitment to responsible gambling is genuine and demonstrated through the wide range of responsible gambling initiatives and tools. We’re proud to be the leaders in responsible gambling in our industry, not just locally, but globally.
We are one of the top workplaces for Women through WORK180. WORK180 is a leading platform that independently assesses employers on policies, benefits and practices that support women and underrepresented groups at work. We remain committed to making Sportsbet the best place to work and encourage you to explore our employer profile on the WORK180 website to learn more about what we offer.
About The Role
Reporting into the Head of Cyber GRC, you will help design, operate and continuously improve Sportsbet’s cyber assurance and risk management activities. You will assess cyber risks and controls, perform control design and operating effectiveness testing, and provide clear, practical advice that helps Technology and Business teams reduce risk while delivering outcomes.
Working alongside and guided by a Senior Cyber GRC Specialist this role has a strong focus on implementing and running a controls assurance and risk management program aligned to the NIST Cybersecurity Framework. You will also assist with external certifications, security awareness, and third-party reviews, partnering with stakeholders across Technology, Risk & Compliance, and the wider business.
Responsibilities Include:
Executing a risk-based cyber controls assurance plan aligned to NIST CSF v2.
Assessing control design and operating effectiveness across systems, applications, processes and IT General Controls (ITGCs).
Working closely with a UK-based team to manage cyber security reviews for new vendors.
Contributing to security awareness activities which includes conducting security awareness training and assisting with creating content.
Managing control deficiencies end-to-end: validation, logging, risk assessment, remediation planning, closure and risk acceptances.
Leveraging automated assurance tooling (e.g., control monitoring, compliance checks, evidence collection) to improve assurance coverage and reduce manual effort.
About You
While we are big on development and offer on the job training, we want to set you up for success. Along with a great attitude, it would be ideal that you have:
Working knowledge of cyber risk management, control design, and evidence-based testing.
Proven experience in cyber controls assurance (e.g., advisory, internal, or external audit roles).
Good knowledge of industry practice such as NIST, COBIT, ISO27001, or PCI-DSS is beneficial.
Strong analytical skills with attention to detail and an ability to see the bigger risk picture.
Clear communicator who can tailor messages for technical and non-technical audiences.
Collaborative and relationship-focused, with the confidence to work independently and as part of a broader team
The Perks
We work hard and play hard, so along with a competitive salary and generous performance-based bonus for permanent staff members, here’s some of our other perks:
25 days annual leave (that’s right, an additional week’s leave!)
Hybrid working policy (Monday and Friday from home) and a $1,050 home office allowance for new starters.
Industry leading Parental Leave support program with 26 weeks paid leave for Primary Carers and no wait time. We also have a progressive return to work benefit for your first 6 months back: come back for 3 days, get paid for 4; come back for 4 days, get paid for 5.
Hack Days - where your creativity and collaborative ideas lead to exciting new ideas and projects for our customers.
Access to outstanding career development programs, including expert-led internal training and external learning opportunities (staff allowance for personal development)
Weekly concierge service including free massages and nail appointments – all onsite in our Melbourne office!
Free breakfast, daily fresh fruit and weekly rotating socials, from Thursday office drinks to fun team events
End of trip facilities with onsite table tennis and pool tables
Discounted health insurance and free flu jabs yearly.
We review applications within the first two weeks, so apply now! Check out our Life@Sportsbet Instagram, LinkedIn, and careers website for more information about our inclusive culture.
Our Focus on Diversity, Equity & Inclusion
We don’t just support diversity – we celebrate it! This is a workplace where you can thrive and feel safe to bring your whole authentic self to work.
What’s the Green Tick Feeling?
Well, it’s different for everyone, yet unites us all. It’s the feeling you get when you succeed, no matter what success looks like to you. It's all the little and big things that make you feel like you’re thriving when working at Sportsbet.
We’re an inclusive employer who welcomes you for who you are, as you are – so, if you require adjustments to the recruitment process, please let us know in your application. We also know flex means different things to different people, so let us know how we can support you to be your best.
If you think you’d be a great fit but don’t necessarily meet everything in the job description, please still get in touch.
Ready to bring excitement to life? Apply now
💡 Quick Summary
Seeking a career-building opportunity? The Cyber Security GRC Specialist position is now open for candidates interested in the Back Office Jobs sector. This role in Melbourne offers a professional environment and growth potential.
Requirement Snapshot: Candidates should possess basic communication skills, a proactive attitude, and the ability to work in a team. Experience in Back Office Jobs is a plus.
