Senior Cyber Grc Specialist

4 days ago

Sydney, New South Wales, Australia Ampol Full time

OverviewSenior Cyber GRC Specialist role at Ampol.
Ampol is Australia's only owned fuel brand, with a focus on delivering value through technology and data-driven transformation.About the roleThe Cyber, Risk & Governance teams protect Ampol Group's reputation and social license to operate by enhancing cyber resilience.
The Senior GRC Analyst will support cyber security governance, risk and compliance across Ampol, including IT suppliers, outsourced providers, and internal IT environments.
Responsibilities include assessing, aligning, and testing security controls to meet regulatory obligations and industry best practices.You'll take us further byTranslating strategy into action: execute policy updates, risk assessments, and compliance checks.Managing workflows: own GRC tasks such as control testing, risk reviews, third-party assessments, and audit preparation.Conducting assessments: lead or assist with cyber risk assessments, control gap analyses, and audits.Maintaining registers and dashboards: keep risk registers, control libraries, and compliance tracking tools up to date.Preparing reports and presentations: draft reports for management and governance forums to show risk and compliance status.Tracking KPIs and KRIs: monitor indicators and escalate deviations with context and recommended actions.Cross-functional liaison: build relationships with stakeholders across Ampol including technology managers within the Technology, Digital & Data function.Identifying improvement opportunities and implementing enhancements with minimal supervision.Team support: assist Cyber GRC team members to foster a culture of excellence.We'd love it if you haveStrong knowledge of industry environments, architecture, technologies, and IT services with cyber risk management expertise.Excellent stakeholder management and ability to reach consensus among diverse views.Strong planning and organisational skills with the ability to balance priorities.Demonstrated expertise in regulations (e.g., Privacy Act 1988, Critical Infrastructure Act 2018), standards (e.g., PCI DSS), and frameworks (e.g., NIST CSF, ISO 27001).
General IT experience including knowledge of development, operations, and change management.Experience with project management methodologies to help teams meet deadlines.Analytical, problem-solving, and decision-making abilities to address technology challenges.We'll take you further byCompetitive total remuneration including base salary, performance incentive, employee share offers, and a 25% discount on fuel for two privately used cars.Flexible/hybrid work options.Internal recognition platform and career development opportunities.Family-friendly benefits including BabyCare Package and novated lease options.Employee Share Scheme and access to discounts through Ampol Benefits & Recognition platform.Paid volunteering day per year with Ampol Foundation partners.We're an equal opportunity workplace.
We celebrate diversity and inclusion and welcome applications from people of all ages, cultural backgrounds, and diverse sexualities and genders.
Aboriginal and Torres Strait Islander peoples are encouraged to apply.Seniority levelMid-Senior levelEmployment typeFull-timeJob functionInformation TechnologyIndustries: Oil and GasReferrals increase your chances of interviewing at Ampol.
For job alerts and more, visit Ampol's career site.
#J-18808-Ljbffr

  • Senior Cyber GRC Specialist

    2 weeks ago

    Sydney, New South Wales, Australia Ampol Full time

    OverviewSenior Cyber GRC Specialist role at Ampol. Ampol is Australia's only owned fuel brand, with a focus on delivering value through technology and data-driven transformation.About the roleThe Cyber, Risk & Governance teams protect Ampol Group's reputation and social license to operate by enhancing cyber resilience. The Senior GRC Analyst will support...

  • GRC Cyber Security Specialist

    2 weeks ago

    Sydney, New South Wales, Australia beBeeCybersecurity Full time $120,000 - $140,000

    Overview of the Role:Cyber security specialists are in high demand due to the increasing need for organizations to protect themselves from cyber threats. This role involves working at the intersection of cyber strategy, governance, risk, and technical execution.The primary objective of this position is to identify and address potential risks that could...

  • GRC Cyber Strategy Consultant

    2 weeks ago

    Sydney, New South Wales, Australia beBeeCyber Full time $120,000 - $140,000

    Job OverviewThe ideal candidate will operate at the intersection of cyber strategy, governance, risk, and technical execution.Key ResponsibilitiesConduct assessments using NIST CSF, ISO 27001, and other frameworks to identify risk and control gaps.Work on cyber strategy initiatives, building out new capabilities or service line, and driving that discipline...

  • Italian Speaking Cyber Security Grc Specialist

    5 days ago

    Sydney, New South Wales, Australia Naviro Full time

    OverviewItalian Speaking Cyber Security GRC Specialist – Naviro, Sydney, New South Wales, Australia.EngagementContract, up to 3 months.Base pay rangeA$120.00/hr - A$150.00/hrClient needThey have a contract requirement (up to 3 months) looking for an Italian speaking Cyber Security GRC Specialist. Client's need for Italy's Cloud Strategy Attestation: CSPs...

  • Italian Speaking Cyber Security GRC Specialist

    2 weeks ago

    Sydney, New South Wales, Australia Naviro Full time

    OverviewItalian Speaking Cyber Security GRC Specialist – Naviro, Sydney, New South Wales, Australia.EngagementContract, up to 3 months.Base pay rangeA$120.00/hr - A$150.00/hrClient needThey have a contract requirement (up to 3 months) looking for an Italian speaking Cyber Security GRC Specialist. Client's need for Italy's Cloud Strategy Attestation: CSPs...

  • Italian Speaking Cyber Security GRC Specialist

    2 weeks ago

    Sydney, New South Wales, Australia Naviro Full time

    OverviewItalian Speaking Cyber Security GRC Specialist – Naviro, Sydney, New South Wales, Australia.EngagementContract, up to 3 months.Base pay rangeA$120.00/hr - A$150.00/hrClient needThey have a contract requirement (up to 3 months) looking for an Italian speaking Cyber Security GRC Specialist. Client's need for Italy's Cloud Strategy Attestation: CSPs...

  • GRC Expert

    1 week ago

    Sydney, New South Wales, Australia beBeeCyberstrategy Full time $120,000 - $140,000

    Job OverviewWe are seeking a Cyber Strategy & GRC Consultant to join our high-performing team. The ideal candidate will operate at the intersection of cyber strategy, governance, risk, and technical execution.The RoleYou will lead small to mid-scale client engagements, and support large-scale or strategic projects. You will work closely with CISOs,...

  • Senior GRC Analyst

    1 day ago

    Sydney, New South Wales, Australia Oscar Zhao Full time

    Join a global insurance broker Your new company A global general insurance broker is seeking a permanent Senior GRC Analyst to join their Cybersecurity Team in Sydney. This role will involve owning the IT risk management process and cyber security governance processes. Your new role Reporting to the CISO, your new role will be varied and...

  • Senior GRC Analyst

    1 week ago

    Sydney, New South Wales, Australia Hays Full time $140,000 - $150,000 per year

    Competitive SalaryPermanent full-time opportunityOpportunity to UpskillYour new companyA global general insurance broker is seeking a permanent Senior GRC Analyst to join their Cybersecurity Team in Sydney. This role will involve owning the IT risk management process and cyber security governance processes.Your new roleReporting to the CISO, your new role...

  • Senior Cyber Risk Professional

    2 weeks ago

    Sydney, New South Wales, Australia beBeeCyber Full time $120,000 - $140,000

    Lead Cyber Strategy and GRC ConsultantThis role involves providing tailored, premium services to modern enterprise clients.Conduct assessments using NIST CSF, ISO 27001, and other frameworks to identify risk and control gaps.Develop cyber strategy initiatives, building out new capabilities or service lines, and driving those disciplines within the...