Cyber GRC and IT Resilience Team Lead

MyChemist Retail Group; Melbourne; On-site; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Annual salary reviews

Paid parental leave

Employee Assistance Program

Staff discounts and partnerships

Job summary

Sigma Healthcare is seeking a Cyber GRC & IT Resilience Team Lead to provide day-to-day leadership of the Cyber Governance, Risk and Compliance function and coordinate IT disaster recovery across Technology.

You will embed recovery standards, strengthen assurance and reporting, and lead a team to build resilient, accountable practices for the organisation.

Qualifications

• Bachelor’s or higher degree in information technology or related field.
• Experience with information security, disaster recovery and risk management frameworks (NIST CSF, ISO 27001, PCI DSS).
• Ability to lead a team and communicate risk to senior stakeholders.
• Strong planning, organisation and attention to detail.

Responsibilities

• Lead the operational rollout of IT Disaster Recovery standards with governance and operating rhythms.
• Align technology recovery plans with critical services and business impact assessments.
• Coordinate RTOs/RPOs, dependencies, recovery sequencing and testing.
• Identify and report technology recovery risks and gaps with remediation ownership and audit actions.
• Lead and develop the Cyber GRC team across cyber and technology risk, governance, assurance and audit.
• Develop KPIs, KRIs and management reporting for senior stakeholders.
• Drive continuous improvement in GRC and IT resilience processes and cross-functional collaboration.

Skills

Information security

Disaster recovery

Risk management

Team leadership

Stakeholder communication

Cloud security

SIEM

Education

Tertiary qualification in information technology or related field

Tools

Excel

SharePoint

SIEM

DLP

Job description

Our Cyber & Risk team safeguards Sigma Healthcare’s assets and helps the business achieve its objectives. Working across Technology, Enterprise Risk and business functions, the team strengthens cyber governance, risk management, assurance and operational resilience across the organisation.

About the Role

Reporting into the Head of Security Services (IT), the Cyber GRC & IT Resilience Team Lead provides day-to-day leadership of the Cyber Governance, Risk and Compliance function while coordinating IT disaster recovery across Technology. You will embed recovery standards into business-as-usual operations, strengthen assurance and reporting, and lead a team of three to build resilient, accountable practices.

Role Responsibilities

• Lead the operational rollout of Sigma Healthcare’s IT Disaster Recovery Standard, establishing clear governance, accountability and operating rhythms.
• Partner with Business Continuity and business stakeholders to align technology recovery plans with critical services, business impact assessments and recovery priorities.
• Coordinate recovery plans, recovery time and point objectives (RTOs and RPOs), dependencies, recovery sequencing and IT disaster recovery testing.
• Identify and report technology recovery risks and gaps, tracking remediation ownership, milestones and audit actions.
• Lead, coach and develop the Cyber GRC team across cyber and technology risk, compliance, governance, assurance and audit.
• Develop meaningful KPIs, KRIs and management reporting to inform senior stakeholders and support risk-based decisions.
• Drive continuous improvement in GRC and IT resilience processes, team capability and cross-functional collaboration.

Who Are We Looking For?

• A tertiary qualification in information technology or a related field.
• Experience with information security, disaster recovery and risk management frameworks such as NIST CSF, ISO 27001 and PCI DSS.
• The ability to lead a team, set priorities and communicate risk and resilience matters effectively with senior stakeholders.
• Strong planning, organisation, written and verbal communication, time management and attention to detail.
• Information security or risk management certifications, or progress towards them, such as CISA, CISM, CRISC or ISO 27001 qualifications.
• Experience with cloud security, DLP, firewalls, EDR, encryption, vulnerability management or SIEM, along with advanced Excel, financial acumen or SharePoint knowledge, will be highly regarded.

Why Join Us?

Grow your career with purpose – Access a wide range of learning and development programs, including our internally designed leadership courses (including our Women In Leadership program) to support your long-term growth. Be part of a purpose-driven organisation making a difference in healthcare, working with a collaborative and supportive team.

Be rewarded for your impact – Enjoy annual salary reviews linked to your performance, recognising the value you bring to the team.

Paid parental leave – We support growing families with six weeks of paid parental leave for primary carers and one week of paid parental leave for secondary carers.

Exclusive savings – Access generous team member discounts across a wide range of products with our partnership with Flare, including company-wide corporate offers on healthcare premiums with Bupa Healthcare, banking benefits with Comm Bank, novated leasing and a team member discount card entitling you to savings in our Chemist Warehouse Pharmacies

Support when you need it – Tap into confidential Employee Assistance Program (EAP) services for personal or professional support.

About Us

Sigma Healthcare is powering pharmacy! We have the largest pharmacy network in Australia with trusted brands including Chemist Warehouse, Amcal, Discount Drug Stores and Ultra Beauty! We are powered by our dedicated people and our leading Australian full line pharmacy wholesale and distribution business that delivers medicines to any pharmacy anywhere in Australia. With Chemist Warehouse now operating in four countries outside Australia, we continue to expand our reach.

Sigma Healthcare is an equal opportunity employer and is committed to fostering a diverse, inclusive, and respectful workplace where everyone can thrive. We welcome applications from people of all backgrounds and experiences and encourage you to apply, even if you don't meet every requirement listed.