Senior GRC Specalist
Core
Lead the maintenance and continual improvement of the organisation's Information Security Management System (ISMS), manage cyber risk activities, and ensure compliance with industry standards and regulatory requirements.
Role type
Senior GRC Specialist (Cyber Security)
Builds
Cyber security governance frameworks, risk registers, treatment plans, and compliance reports
Domain
Cyber Security / Governance, Risk, and Compliance
Deliverable
dashboards & analysis
Required skills
Cyber Security GRC, ISO 27001, ISO 31000, ASD ISM, Essential Eight, risk assessment, audit coordination, third-party security assessment, policy development, stakeholder engagement
Preferred skills
CISA, CISM, CRISC, CISSP, ISO 27001 Lead Auditor
Technologies
ISO 27001, ISO 31000, ASD ISM, Essential Eight, PCI-DSS
Responsibilities
Lead the maintenance and continual improvement of the organisation's Information Security Management System (ISMS). Conduct cyber security risk assessments across systems, projects, and third-party suppliers. Manage cyber risk registers, treatment plans, and governance reporting. Coordinate internal and external audits, including evidence gathering, control reviews, and remediation activities. Support compliance initiatives across frameworks including ISO 27001, Essential Eight, ASD ISM, and PCI-DSS. Prepare reports, metrics, and presentations for leadership and governance forums.
Seniority
Senior, hands-on IC