We're partnering with a large ASX-listed organisation to hire a Cyber GRC & IT Resilience Team Lead. This is a brand-new role and a genuine greenfield opportunity.

The ITDR Standard and templates are already written. What's needed now is someone to drive them forward and turn them into a working program across Technology.

This role isn't for a GRC all-rounder who has picked up some DR along the way. We're looking for a GRC professional with proven experience establishing DR within an organisation.

You'll act as 2IC to the Head of IT Security and as technical lead to three GRC analysts working across third-party risk, maturity assessments and audit.

What's on offer

- High visibility, with real backing from senior leadership
- A strong budget, including training and certification support
- A supportive, cooperative cyber team
- A largely greenfield DR program: the Standard is written, you make it work

What you'll be doing

- Act as IT Disaster Recovery Coordinator and operationalise the ITDR Standard across Technology
- Coordinate technology teams to build and maintain recovery plans, RTOs/RPOs, dependencies and recovery sequencing
- Prioritise the systems in scope for audit, then tier critical systems.
- Establish and run the DR testing and exercise program, closing the gaps it surfaces
- Work with the enterprise Business Continuity team so ITDR aligns with BIA outcomes
- Track and report DR risks, gaps and audit remediation to senior leadership
- Lead three GRC analysts across third-party risk, risk registers,



maturity assessments, ISO 27001 and NIST CSF
- Report on KPIs and KRIs across ITDR and Cyber GRC

What you'll bring Must-have:

- Proven experience developing and maintaining IT disaster recovery plans, and establishing DR within an organisation
- Solid understanding of RTOs, RPOs and BIAs, plus system tiering and dependency mapping
- Strong GRC background across frameworks such as NIST, ISO 27001 or PCI DSS
- Experience coaching or leading GRC analysts
- Confidence presenting to senior stakeholders in a fast-paced environment

Desirable:

- Retail, healthcare, logistics or critical infrastructure experience
- Certifications such as CBCI, CBCP, ISO 22301, CISA, CISM, CRISC or ISO 27001 LA/LI
- Exposure to SAP and large ERP environments

Essential requirement Australian work rights, a current driver's licence and a National Police Check are required. Hybrid, typically three days a week on-site.

About Decipher Bureau

Decipher Bureau is Australia's leading cyber security recruitment specialist, partnering with organisations across government, critical infrastructure and enterprise to find and secure exceptional talent. We don't just match skills to a . We take the time to understand the technical demands of a role and whether a candidate will genuinely thrive in the team. Because the right placement beats a quick one, every time.

Interested?

Reach out for a confidential chat:

- Anthony Buccat: [0452 415 858](tel:0452 415 858)
- [email protected]

📌 Cyber GRC & IT Resilience Team Lead (Melbourne)
🏢 The Decipher Bureau
📍 Melbourne