Governance, Risk & Compliance Program Manager
Core
Own governance, risk and compliance across the data centre OT and ICT estate, focusing on ISO 27001 alignment and Australian critical infrastructure requirements.
Role type
Senior GRC Program Manager (build)
Builds
GRC strategy, roadmap, operating model, control library, testing, reporting, and a GRC platform implementation.
Domain
Data centres, critical infrastructure, OT/ICT convergence
Required skills
GRC strategy, ISO 27001 implementation, Australian SOCI Act and Essential Eight knowledge, GRC platform implementation, OT/ICT risk management, audit leadership, vendor security management, executive reporting, team leadership
Preferred skills
OT, building management, or industrial control environments experience
Technologies
ServiceNow IRM, Archer, OneTrust
Responsibilities
Set GRC strategy, roadmap and operating model; Lead ISO 27001 alignment and certification; Select and implement a GRC platform; Own the OT and ICT risk register; Lead internal and external audits; Set vendor and third-party security expectations; Report on risk posture to executives; Lead an assistant manager and direct outsourced specialists
