Cyber GRC Analyst (APRA CPS 234/230, ISO 27001)

Betashares Group; Sydney; On-site; AUD 110,000 - 170,000; Full time

Job summary

Betashares Group is seeking an experienced Cyber GRC professional to own governance, risk and compliance across our technology environment in Australia. You will translate CPS 234, CPS 230 and ISO 27001 into practical controls, lead audits and remediation, and work with the Head of IT to strengthen our GRC program.

The role emphasizes ownership, pragmatic delivery and continuous improvement. You will engage stakeholders across Technology, Security, Risk and Compliance to ensure clear reporting,

Qualifications

• 4+ years in Cyber GRC, Technology Risk or Information Security governance.
• Financial services background with Australian regulatory familiarity.
• Hands-on translation of CPS 234/ CPS 230 into controls and processes.
• Strong ISO 27001 knowledge including SMs, controls and assurance.
• Experience creating practical policies, standards and procedures.
• Hands-on delivery of risk, control assessments, audits and remediation.

Responsibilities

• Own and maintain information security policies, standards and procedures.
• Translate APRA CPS 234, CPS 230 and ISO 27001 into practical controls and processes.
• Drive technology risk, cyber governance and compliance initiatives to completion.
• Maintain control frameworks, risk registers, remediation plans and governance docs.
• Coordinate control assessments, testing and assurance with Tech, Security, Risk and Compliance.
• Prepare and manage audit and regulatory review requirements with evidence collection.
• Identify gaps and implement practical improvements to policies and controls.
• Support third-party security risk assessments including CPS 230 requirements.
• Develop and improve GRC workflows, reporting and evidence management.
• Partner with stakeholders to ensure security and compliance needs are understood.
• Provide clear reporting on compliance activities and remediation progress.
• Take ownership of ongoing GRC improvements as the business grows.

Skills

Cyber GRC

Technology Risk

Information Security Governance

APRA CPS 234

APRA CPS 230

ISO 27001

Policy & Procedure Development

Audit & Remediation

Regulatory Reporting

Stakeholder Engagement

Cloud Security Concepts

Documentation & Reporting

Tools

ServiceNow IRM

Vanta

Drata

Job description

Betashares Group is seeking an experienced Cyber GRC professional to own governance, risk and compliance across our technology environment in Australia. You will translate CPS 234, CPS 230 and ISO 27001 into practical controls, lead audits and remediation, and work with the Head of IT to strengthen our GRC program.

The role emphasizes ownership, pragmatic delivery and continuous improvement. You will engage stakeholders across Technology, Security, Risk and Compliance to ensure clear reporting,