Lead cyber risk, assurance and compliance across a complex enterpriseWork closely with senior cyber and technology leadersPermanent, hybrid prospect based in MelbourneWe are partnering with a large enterprise organisation to appoint a Senior Cyber GRC Specialist as it continues to strengthen its cyber governance, risk and assurance capability.This role will suit someone who is comfortable taking ownership of complex GRC initiatives rather than operating purely in an advisory capacity.
You will lead audit and assurance activity, oversee key risk and compliance processes, and help improve how cyber risk is managed and reported across the organisation.You will work across cyber, technology and the broader business, translating regulatory, audit and risk requirements into practical actions and measurable outcomes.The RoleCoordinate cyber audit and assurance programs across internal and external requirementsManage and maintain the organisation's ISO ***** ISMSLead audit preparation, evidence collection, findings management and remediation trackingOwn key cyber risk processes, including risk assessments, risk registers and treatment plansPrepare clear reporting for senior leadership on risk exposure, compliance and remediation progressReview and improve cyber governance policies,
standards and frameworksSupport alignment with recognised frameworks including ISO ***** and NISTImprove GRC systems, processes and reporting to increase visibility and reduce manual effortPartner with cyber, technology and business teams to embed consistent risk and compliance practicesProvide guidance and support to other members of the GRC functionAbout YouSignificant experience across cyber GRC, technology risk, audit or assuranceExperience working within a large or complex enterprise environmentDemonstrated ownership of ISO ***** audits, internal audits or broader assurance programsStrong practical knowledge of cyber risk assessments, risk registers and treatment planningExperience preparing risk and compliance reporting for senior or executive stakeholdersWorking knowledge of frameworks such as ISO ***** and NISTExperience using GRC platforms or similar risk and compliance toolsStrong written and verbal communication skillsAble to work autonomously, manage competing priorities and drive initiatives through to completionThis is an opportunity to take ownership of meaningful GRC work within an organisation continuing to invest in and mature its cyber security capability.
#J-*****-Ljbffr