Governance, Risk, and Compliance (GRC) Specialist
Core
Support the development and implementation of a unified (IT & OT) Information Security Management System (ISMS) including policies, standards, and processes, while being responsible for subsequent risk management, governance, and compliance activities and reporting.
Role type
Team Lead GRC Specialist (IT/OT)
Builds
Cybersecurity dashboards, ISMS policies, standards, and compliance frameworks
Domain
Cybersecurity / Operational Technology / Government Compliance
Required skills
Risk assessment, policy formulation, ISO 27001, Essential Eight, QPSF, stakeholder engagement, change management, MS Project
Preferred skills
ISO 27001 Lead Implementor/Auditor, PRINCE2/PMP, Electronics/Electrical Engineering background
Technologies
MS Project
Responsibilities
Build and maintain Department IT/OT knowledge to support the creation of policies, standards, and processes; Perform technical (information and cybersecurity) risk assessment across complex Operational Technology landscapes; Assess control baselines to ensure compliance with Essential Eight and ISO 27001; Develop and deliver information and cybersecurity awareness training, specific to Operational Technology; Create and facilitate a collaborative review schedule for the ISMS to ensure relevance, currency of content, and identification of updates or changes
Seniority
Team Lead