Governance, Risk & Compliance Program ManagerMission Critical Recruiting – Sydney NSWFull time20h ago , from Mission Critical RecruitingA hyperscale data centre developer and operator with campuses across APAC is building out its ICT function, and this is one of the first senior hires in a recent GRC vertical.You'll own governance, risk and compliance across the data centre OT and ICT estate: building management, power and cooling controls, monitoring platforms and the corporate systems that sit around them.
The immediate priority is ISO ***** alignment and certification, alongside the Australian requirements that apply to critical data centre assets, such as the SOCI Act and Essential Eight.This is a build, not a maintenance job.
There is no GRC platform in place yet, so you'll recommend one, implement it and use it to map, monitor and report controls across the business.Why it's worth a lookA genuine greenfield remit: you'll shape the function, the platform and the teamAn APAC role at a business with significant capacity planned across the regionA hiring manager with a clear, mapped team plan and further hires to followWhat you'll doSet the GRC strategy, roadmap and operating model for data centre OT and ICTLead ISO ***** alignment and certification,



plus the country-specific controls that go beyond it, starting with AustraliaSelect and implement a GRC platform, and build the control library, testing and reporting on itOwn the OT and ICT risk register, risk acceptance and remediation trackingLead internal and external audits and customer assurance requestsSet vendor and third-party security expectations, including remote accessReport clearly on risk posture and control maturity to the executive teamLead an assistant manager and direct outsourced specialistsWhat they're looking forSignificant GRC, technology risk or assurance experience in data centres, critical infrastructure, utilities, telecoms, financial services or similar regulated environmentsHands-on ISO ***** implementation, ideally taking an organisation through certificationA working knowledge of Australian requirements such as the SOCI Act and Essential EightExperience building controls on a GRC platform such as ServiceNow IRM, Archer or OneTrustExposure to OT, building management or industrial control environments is a strong advantage; deep SOC or security engineering experience is not the core of this roleThe ability to explain technical risk to senior, non-technical stakeholders
#J-*****-Ljbffr

📌 Governance, Risk & Compliance Program Manager (Sydney)
🏢 Mission Critical Recruiting
📍 Sydney