Cyber GRC and IT Resilience Team Lead

Chemist Warehouse Group; Australia; Remote; AUD 150,000 - 190,000; Full time

Job summary

Sigma Healthcare seeks a Cyber GRC and IT Resilience Team Lead to guide the Cyber Governance, Risk and Compliance function and coordinate IT disaster recovery across Technology. Lead a team of three to embed resilience into BAU operations and strengthen assurance and reporting.

You will develop KPIs/KRIs and provide governance and risk insights to senior stakeholders, driving continuous improvement in GRC and IT resilience practices across the organisation.

Qualifications

• Bachelor's degree or higher in information technology or a related field.
• Experience with NIST CSF, ISO 27001 and PCI DSS.
• Ability to lead a team and communicate risk to senior stakeholders.
• Strong planning, organisation and attention to detail.
• Certifications such as CISA, CISM, CRISC or ISO 27001 are preferred.
• Experience with cloud security, DLP, firewalls, EDR, encryption, vulnerability management.

Responsibilities

• Lead the Cyber GRC and IT resilience team and drive daily operations.
• Roll out IT disaster recovery standards with governance and rhythms.
• Align recovery plans with critical services and business impact.
• Coordinate RTOs, RPOs, dependencies and testing.
• Report technology recovery risks, gaps, and remediation actions.
• Develop KPIs/KRIs and management reporting for senior stakeholders.
• Drive continuous improvement in GRC and resilience processes.

Skills

Team leadership

Risk management

Information security

Communication

NIST CSF

ISO 27001

PCI DSS

Cloud security

DLP

EDR

SIEM

Excel

SharePoint

Education

Tertiary qualification in information technology

Tools

Excel

SharePoint

SIEM

Job description

Select how often (in days) to receive an alert:

Title: Cyber GRC and IT Resilience Team Lead

Employment Type: Permanent Full Time

About the Team

Our Cyber & Risk team safeguards Sigma Healthcare’s assets and helps the business achieve its objectives. Working across Technology, Enterprise Risk and business functions, the team strengthens cyber governance, risk management, assurance and operational resilience across the organisation.

About the Role

Reporting into the Head of Security Services (IT), the Cyber GRC & IT Resilience Team Lead provides day-to-day leadership of the Cyber Governance, Risk and Compliance function while coordinating IT disaster recovery across Technology. You will embed recovery standards into business-as-usual operations, strengthen assurance and reporting, and lead a team of three to build resilient, accountable practices.

Role Responsibilities

• Lead the operational rollout of Sigma Healthcare’s IT Disaster Recovery Standard, establishing clear governance, accountability and operating rhythms.
• Partner with Business Continuity and business stakeholders to align technology recovery plans with critical services, business impact assessments and recovery priorities.
• Coordinate recovery plans, recovery time and point objectives (RTOs and RPOs), dependencies, recovery sequencing and IT disaster recovery testing.
• Identify and report technology recovery risks and gaps, tracking remediation ownership, milestones and audit actions.
• Lead, coach and develop the Cyber GRC team across cyber and technology risk, compliance, governance, assurance and audit.
• Develop meaningful KPIs, KRIs and management reporting to inform senior stakeholders and support risk-based decisions.
• Drive continuous improvement in GRC and IT resilience processes, team capability and cross-functional collaboration.

Who Are We Looking For?

• A tertiary qualification in information technology or a related field.
• Experience with information security, disaster recovery and risk management frameworks such as NIST CSF, ISO 27001 and PCI DSS.
• The ability to lead a team, set priorities and communicate risk and resilience matters effectively with senior stakeholders.
• Strong planning, organisation, written and verbal communication, time management and attention to detail.
• Information security or risk management certifications, or progress towards them, such as CISA, CISM, CRISC or ISO 27001 qualifications.
• Experience with cloud security, DLP, firewalls, EDR, encryption, vulnerability management or SIEM, along with advanced Excel, financial acumen or SharePoint knowledge, will be highly regarded.

Why Join Us?

Grow your career with purpose – Access a wide range of learning and development programs, including our internally designed leadership courses (including our Women In Leadership program) to support your long-term growth. Be part of a purpose-driven organisation making a difference in healthcare, working with a collaborative and supportive team.

Be rewarded for your impact – Enjoy annual salary reviews linked to your performance, recognising the value you bring to the team.

Paid parental leave – We support growing families with six weeks of paid parental leave for primary carers and one week of paid parental leave for secondary carers.

Exclusive savings – Access generous team member discounts across a wide range of products with our partnership with Flare, including company-wide corporate offers on healthcare premiums with Bupa Healthcare, banking benefits with Comm Bank, novated leasing and a team member discount card entitling you to savings in our Chemist Warehouse Pharmacies

Support when you need it – Tap into confidential Employee Assistance Program (EAP) services for personal or professional support.

About Us

Sigma Healthcare is powering pharmacy! We have the largest pharmacy network in Australia with trusted brands including Chemist Warehouse, Amcal, Discount Drug Stores and Ultra Beauty! We are powered by our dedicated people and our leading Australian full line pharmacy wholesale and distribution business that delivers medicines to any pharmacy anywhere in Australia. With Chemist Warehouse now operating in four countries outside Australia, we continue to expand our reach.

Sigma Healthcare is an equal opportunity employer and is committed to fostering a diverse, inclusive, and respectful workplace where everyone can thrive. We welcome applications from people of all backgrounds and experiences and encourage you to apply, even if you don't meet every requirement listed.