Cyber Security - Governance, Risk and Compliance Specialist
On-siteSydney, New South Wales, Australia
Job Summary
Own and mature the ISO 27001 Information Security Management System, driving recertification, surveillance audits, and continuous improvement across global operations. Define governance structures, manage policy lifecycles, and lead internal audits to ensure audit readiness and risk-based decision-making. Maintain a structured cyber risk register, provide executive-level reporting, and design automation for assurance and evidence collection. Lead control validation, support vendor risk management, and respond to customer and regulatory requirements. Collaborate with Security, IT, Engineering, and Operations to strengthen controls. Based at Sydney headquarters with global presence, this role requires ISO 27001 expertise and an engineering-led mindset to align security posture with business risk in a hypergrowth environment.
Required Qualifications
- BS degree in Computer Science, Information Technology, or a similar technical field, or equivalent practical experience
- Demonstrated experience operating or owning an ISO 27001 ISMS and audit lifecycle
- Minimum 5 years' experience in related roles, which may include: GRC Consultant, Security Engineer, Security Analyst, Compliance and Risk Officer
- Project management techniques and processes
- Vendor and customer compliance programmes
- Strong practical experience visualising security control information, including dashboards, integrations, or other risk-related reporting
- Large-scale data and information handling
- Risk management and ISO 31000
- Corporate, infrastructure, and cloud security fundamentals
- Identity and access management
Desired Qualifications
- Comfortable working on the command line in a Linux-first environment
- Familiarity with RESTful APIs
- Familiarity with AI and LLM technologies
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.