About Our Client

An organisation within the FMCG industry, located in Burnley.

Job Description

- Execute and report on the organisation's multi-year cybersecurity uplift roadmap.
- Maintain security policies, standards and controls aligned to ISO 27001, ISM and ASD Essential Eight.
- Coordinate internal and external security audits, including evidence collection and remediation tracking.
- Manage risk assessments, business impact assessments and third-party security reviews.
- Maintain and improve the Information Security Management System (ISMS).
- Monitor security compliance, identify control gaps and drive remediation activities.
- Provide governance reporting and cybersecurity guidance to key stakeholders.

The Successful Applicant

A successful GRC Analyst should have:





- 3-5 years' experience in Cybersecurity Governance, Risk & Compliance (GRC).
- Robust working knowledge of ISO 27001, ISM and ASD Essential Eight.
- Experience maintaining ISMS frameworks and security documentation.
- Proven experience supporting security audits and audit-ready evidence management.
- Experience in vendor risk management, risk assessments and control reviews.
- Strong stakeholder engagement and communication skills.
- Relevant tertiary qualifications and certifications such as CISSP, CISM or CRISC are advantageous.

📌 Cyber Security & GRC Analyst (Sydney)
🏢 Michael Page
📍 Sydney