Cyber Governance, Risk, and Compliance
13 hours ago
About the Role
We are seeking an experienced Cyber Governance, Risk, and Compliance (GRC) Specialist to lead the implementation and continuous improvement of our organisation’s cybersecurity governance framework. This position is pivotal in ensuring that our systems, data, and infrastructure adhere to internal policies and external regulatory obligations, while proactively managing cyber risk and compliance across the enterprise.
You will work closely with executive leadership, IT teams, and external stakeholders to develop strategies, monitor controls, and report on risk posture, audit outcomes, and compliance metrics.
Key Responsibilities
Lead the design, implementation, and management of cybersecurity governance frameworks, including policies, standards, and procedures aligned to ISO 27001, NIST, Essential Eight, and other relevant standards.
Perform risk assessments and control evaluations to identify cybersecurity risks across infrastructure, applications, and third-party vendors.
Develop and maintain the organisation’s information security risk register and assist in the treatment planning and mitigation strategies.
Coordinate internal and external audits related to cybersecurity and manage compliance reporting (e.g., SOC 2, ISO 27001, CPS 234, GDPR).
Provide expert advice to business and IT leaders regarding security requirements, regulatory changes, and risk implications of new projects or technologies.
Monitor compliance with security policies, identify gaps, and drive remediation in collaboration with system and security teams.
Develop metrics and reporting dashboards for executive oversight of cyber risk, control effectiveness, and incident trends.
Lead training and awareness initiatives to embed a culture of security and compliance across all departments.
Liaise with external auditors, regulators, and compliance authorities where required.
Required Skills & Experience
Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, or related field.
Minimum 5 years of experience in a cybersecurity GRC or Information Security Compliance role.
Strong understanding of risk management frameworks (e.g., ISO 27005, NIST RMF, FAIR), and regulatory standards (e.g., CPS 234, GDPR, PCI-DSS, SOX).
Demonstrated experience leading internal/external security audits and vendor risk assessments.
Excellent communication and stakeholder engagement skills, including report writing and executive briefings.
Familiarity with GRC platforms and SIEM tools (e.g., Archer, ServiceNow GRC, Splunk, Microsoft Defender).
Relevant certifications preferred: CISM, CISSP, CRISC, ISO 27001 Lead Auditor, or equivalent.
Why Join Us?
Work with a dedicated team driving cyber resilience across the organisation.
High-visibility role influencing security posture and risk culture at the executive level.
Career development and upskilling opportunities in a supportive environment.
Flexible working arrangements with a hybrid or remote-friendly structure.
-
Cyber Governance, Risk, and Compliance
3 days ago
Sydney, New South Wales, Australia AI Talent Full time $70,000 - $120,000 per yearAbout the RoleWe are seeking an experienced Cyber Governance, Risk, and Compliance (GRC) Specialist to lead the implementation and continuous improvement of our organisation's cybersecurity governance framework. This position is pivotal in ensuring that our systems, data, and infrastructure adhere to internal policies and external regulatory obligations,...
-
Sydney, Australia Domain Group Full time**Cyber Governance, Risk and Compliance Manager - Sydney Office - Permanent Full Time** We have a high impact; newly created opportunity for an experienced Cybersecurity Governance, Risk and Compliance (GRC) Manager, to join our Domain team. Reporting into the Chief Information Security Officer (CISO); you will be responsible for the implementation and...
-
Cyber Governance, Risk, and Compliance
2 days ago
Sydney, Australia AI Talent Full time**About the Role** We are seeking an experienced **Cyber Governance, Risk, and Compliance (GRC) Specialist** to lead the implementation and continuous improvement of our organisation’s cybersecurity governance framework. This position is pivotal in ensuring that our systems, data, and infrastructure adhere to internal policies and external regulatory...
-
Cyber Risk and Governance Consultant
1 day ago
Sydney, Australia Interactive Pty Ltd Full time**LOCATION(S)** - Sydney *** **POSITION** - Permanent - **DEPARTMENT** - IT & Telecomms - Our Cyber Security team protects and defends our customers’ and own internal systems and our cyber offering includes threat & vulnerability assessments, cyber risk & governance consulting and 24/7 managed security services. Our Cyber, Risk & Governance team work...
-
Cyber Governance, Risk
5 days ago
Sydney Central Business District, Australia HAYS Full timeGRC Lead | Full time Permanent Position | Sydney **Your new company** This role sits with one of the largest multinational construction company in Australia and they are looking for a GRC Lead in their team. **Your new role** This role is predominately focus security risks, governance and compliance management. The purpose of the role is to support the...
-
Governance, Risk and Compliance Analyst
2 weeks ago
West Perth, Australia Royal Automobile Club of WA Full timeAs a GRC Analyst you will be responsible for driving and maintaining cyber governance processes and practices to support RACWA in managing security risks and compliance obligations. This includes documenting processes for assuring compliance with organisational and regulatory requirements, procedures and standards. This is a 2 year maximum term role. What...
-
Sydney, New South Wales, Australia Commonwealth Bank Full time $120,000 - $180,000 per yearSenior Manager Group Cyber Governance and ComplianceYou are a passionate cybersecurity risk professional with strong expertise in governance, risk and complianceWe are one of the best and most advanced Cyber Security teams in AustraliaTogether we can contribute to protecting the Group, its customers and community from current and evolving cyber threats.See...
-
Coordinator Cyber Risk and Compliance
7 days ago
Sydney Olympic Park, Australia Ambulance Service of NSW Full time**Employment Type**:Permanent Full Time, 38 hours per week **Position Classification**:Health Mgr level 2 **Salary Range**:$109,857 per annum - $129,624 per annum+ 12% super and benefits **Location**: NSW Ambulance State Operations Centre, Sydney Olympic Park **Closing Date**:24 July 2025 **ABOUT NSW AMBULANCE** NSW Ambulance is an integral part of the NSW...
-
Cyber Security Analyst
13 hours ago
NSW - Sydney - City & Inner West, Australia AI Talent Pty Ltd Full timeJob Description We are looking for a seasoned and highly capable Senior Cyber Security Analyst to join our team. In this key role, you will be responsible for protecting the organisation’s systems, networks, and data against evolving cyber threats. Your deep knowledge of cyber security frameworks, risk management, incident response, and operational...
-
Sydney, Australia Fujitsu Full timeAbout the job Expression of Interest_ Governance, Risk and Compliance (GRC) **We Are Fujitsu** We use technology to make happier lives. We are a global leader in technology and business solutions that transform organizations and the world around us. We have a long heritage of bringing innovation and expertise, continuously working to contribute to the...