IT Risk & Assurance Superintendent

Our Company 

PanAust Limited is an Australian-headquartered copper and gold mining company with operations in Laos, and pre-development assets in Papua New Guinea and Chile.  

In Laos, PanAust owns a 90 per cent interest in Phu Bia Mining Limited with the Government of Laos owning the remaining 10 per cent. Phu Bia Mining owns and operates PanAust’s two award winning operations – Phu Kham Copper-Gold and Ban Houayxai Gold-Silver, both located in Xaisomboun Province, 120km north of Vientiane.   

In Papua New Guinea, PanAust holds a 100 per cent interest in the Frieda River Limited Copper-Gold project, which is a transformative pre-development integrated mining, renewable energy and infrastructure project.  

In Chile, PanAust holds a 66 per cent interest in the Inca de Oro Copper-Gold Project through a Chilean incorporated joint venture company, Inca de Oro S. A. 

The Role 

We are currently recruiting for an experienced IT Risk & Assurance Superintendent to join our team. Reporting to the Group Manager IT, the role will be responsible for IT risk and assurance across the Group, with a primary focus on cybersecurity risk governance, artificial intelligence usage and governance, and assurance over the compliance of IT purchasing processes with relevant company standards. 

Key Responsibilities include: 

• Maintain the enterprise IT/OT cybersecurity risk register and associated treatment plans, working closely with the Cybersecurity Supervisor and Cybersecurity Operations team 

• Coordinate cybersecurity governance forums and reporting, providing visibility of risk posture to the Group Manager Technology and relevant governance committees 

• Work with the IT Infrastructure Superintendent, Network Supervisor and Hosting Supervisor to assure that infrastructure, network and hosting environments comply with cybersecurity standards and controls 

• Support the planning and execution of internal and external cybersecurity audits, and track remediation of findings to closure 

• Monitor emerging cyber threats and regulatory requirements relevant to the Group's operations in Laos, Chile, Papua New Guinea and Australia, and assess their impact on the risk profile 

• Assess proposed AI tools and use cases for risk prior to adoption, working with the Service Delivery and Enterprise Applications Manager and relevant business stakeholders 

• Develop AI governance controls, guidelines and supporting material to support safe and responsible use of AI across the Group, and monitor acceptable use 

• Report on AI usage risk and governance maturity to the Group Manager Technology and relevant stakeholders 

• Monitor IT purchasing and procurement activity for compliance with company procurement standards, the Financial Delegated Authorities Manual (FDAM) and vendor management requirements 

• Partner with the Service Delivery and Enterprise Applications Manager and other IT leads to embed compliance checks into procurement workflows 

• Conduct periodic reviews and audits of all items within the position scope of responsibility 

• Support the development and maintenance of IT procurement-related policies and standards 

• Develop and maintain the strategy and roadmap for cybersecurity risk governance, AI governance and IT procurement compliance, aligned to the Secure and Govern domains of the Group IT Operating Model 

• Track progress against roadmap milestones and report on risk and assurance maturity uplift over time 

To be successful in this role, we are looking for candidates who: 

• Tertiary qualification in Information Technology, Cybersecurity, Risk Management or a related discipline 

• 5+ years' experience in IT risk, cybersecurity governance or GRC (Governance, Risk and Compliance) roles, ideally within mining, resources or another regulated, capital-intensive industry 

• Sound working knowledge of cybersecurity risk frameworks and standards (e.g. Essential 8, NIST CSF, OT5 and / or IEC 62443 for OT environments) 

• Demonstrated experience developing or applying AI governance frameworks, policies and risk assessment approaches 

• Understanding of IT procurement, sourcing and vendor risk management practices, and experience assuring compliance against company standards and delegated authorities 

• Demonstrated experience developing technology strategies and roadmaps 

• One or more recognised risk or security certifications (e.g. CRISC, CISM, CISA, ISO 27001 Lead Auditor) desirable 

• Strong stakeholder management skills, with the ability to influence and work effectively across a multi-jurisdictional, multicultural organisation (Laos, Chile, Philippines, Australia) 

• Willingness to travel regularly to our global entities Laos, Chile and Papua New Guinea, with possible considerations for company funded relocation.   

• Exceptional oral and written communication skills, including report writing for executive and governance committee audiences 

Why Join Us? 

• Our Values: Our core values of Care, Leadership, Integrity and Performance and represent the foundations of our great culture.  

• Remuneration: We offer a competitive salary, bonus and benefits package. 

• Meaningful Work: The work we do is valuable and connects all of our employees through a shared vision and our values.  

• Sustainability: We actively focus on our environmental footprint and build upon community development initiatives in communities where we operate. 

PanAust is focussed on building a workforce that embraces diversity and inclusion, aiming to create an environment that brings us all together through connection, security and community and harnessing what makes us unique. As an Equal Opportunity employer, we encourage and welcome applications from all genders, abilities, generations and cultural backgrounds.  

Please note that due to the volume of applications we receive, only shortlisted candidates may be contacted regarding their application status.  

We are not working with agencies to recruit this role.  

If you’d like to learn more about us, please visit www.PanAust.com.au