Cyber Risk Analyst

Join Amcor and you can be part of the team that makes the packaging of the future better for people and our planet.

Here at Amcor, we work together every day to make a positive impact on the lives of millions of people across the globe by providing packaging for essential products, including food, beverages, pharmaceutical, medical, home and personal care. We are sustainability leaders in our industry, and we were the first global packaging company to commit to making all our products recyclable or reusable by 2025. In addition, our products play a vital role in a circular economy as we are working toward 30% recycled material across our portfolio by 2030, and we are one of few packaging companies committed to using science-based targets and achieving net zero emissions by 2050.

We are always looking for talented and passionate individuals who are motivated to make a difference. Working at Amcor means you will have a unique opportunity to be a part of an organization that is committed to innovating and driving new solutions to create more sustainable packaging solutions.

To find out more about our commitment to sustainability and about Amcor, visit www.amcor.com I LinkedIn I Glassdoor I Facebook I YouTube

About The Role

The Cybersecurity Risk Analyst will be integral in developing, supporting, and leading initiatives to assess, analyze, and manage risks across Amcor to improve overall cybersecurity maturity by aligning closely with key business requirements. This role is designed not only to maintain but to elevate Amcor’s cybersecurity posture, ensuring the organization's resilience against an ever-evolving cyber threat landscape.

This role plays a crucial role in protecting our organization's information assets by managing risks effectively. The role involves developing and maintaining cyber security plans, conducting assessments, collaborating with teams, ensuring compliance with industry standards, and continually managing cybersecurity risk.

Key Job Accountabilities

• Apply qualitative risk valuation models to inform and support strategic/tactical risk-based decisions.
• Assist project teams in the implementation of security measures to meet corporate security policies, manage risk, and meet external regulations.
• Communicates risk assessment findings to team owners and custodians.
• Identify opportunities to improve risk posture, developing solutions for remediating or mitigating risks, and assessing the residual risk.
• Establish and maintain continuous communication channels for effective risk management.
• Maintains strong working relationships with individuals and groups involved in managing information risks across the organization.
• Performs focused information risk assessments of existing or new services and technologies.
• Provides consultative advice to information security teams that enables them to make informed risk management decisions.
• Participate in the development of a strategic risk management plan that includes identification, measurement, treatment, and reporting of new and existing cybersecurity risks.
• Support incident response efforts and conduct post-incident analysis to identify areas for improvement.
• Work with peers to improve and mature the organization’s security metrics and reporting capabilities.
  
  

Qualifications/Requirements

• 3+ years relevant experience in risk assesment
• Bachelors – IT or related field or comparable work experience
• Proven expertise in cybersecurity concepts, practices, and procedures
• Preferred – CRISC or similar certifications
• Excellent interpersonal and communication skills, capable of working collaboratively with and presenting to stakeholders at all levels
• Ability to apply original and innovative thinking to produce new ideas.
• Ability to effectively influence others to modify their opinions, plans or behaviours.
• Ability to identify and assess the severity and potential impact of risks.
• Ability to work on several tasks simultaneously and pay attention to sources of information from inside and outside one’s network within an organization.
• Communicate risk assessment status to IT and Business leadership teams as well as risk owners outside the cybersecurity program in a way that consistently drives objective, fact-based decisions about risk that optimize the trade-off between risk mitigation and business performance.
• Strong technical information security knowledge to assess various information security and risk management processes and tools.
• Weight business needs against security concerns and articulate issues and options to management.
  
  

Amcor is a global leader in developing and producing responsible packaging solutions for food, beverage, pharmaceutical, medical, home and personal-care, and other products. Amcor works with leading companies around the world to protect their products and the people who rely on them, differentiate brands, and improve supply chains through a range of flexible and rigid packaging, specialty cartons, closures, and services. The company is focused on making packaging that is increasingly lighter weight, recyclable and reusable, and made using an increasing amount of recycled content. In fiscal year 2022, 44,000 Amcor people generated $15 billion in annual sales from operations that span 220 locations in 43 countries. NYSE: AMCR; ASX: AMC