Cyber GRC & IT Resilience Lead

Decipher Bureau; Melbourne; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Training and certification support

Supportive cyber team

Job summary

Decipher Bureau is partnering with an ASX-listed organisation to hire a Cyber GRC & IT Resilience Team Lead. This is a brand-new, greenfield role that will drive IT disaster recovery standards into a full working program across Technology.

You will act as 2IC to the Head of IT Security and lead three GRC analysts across third-party risk, maturity assessments and audit, with a hybrid work model and strong leadership backing.

Qualifications

• Proven experience developing and maintaining IT disaster recovery plans, and establishing DR within an organisation.
• Solid understanding of RTOs, RPOs and BIAs, plus system tiering and dependency mapping.
• Strong GRC background across frameworks such as NIST, ISO 27001 or PCI DSS.
• Experience coaching or leading GRC analysts.
• Confidence presenting to senior stakeholders in a fast-paced environment.

Responsibilities

• Act as IT Disaster Recovery Coordinator and operationalise the ITDR Standard across Technology
• Coordinate technology teams to build and maintain recovery plans, RTOs/RPOs, dependencies and recovery sequencing
• Prioritise the systems in scope for audit, then tier critical systems.
• Establish and run the DR testing and exercise program, closing the gaps it surfaces
• Work with the enterprise Business Continuity team so ITDR aligns with BIA outcomes
• Track and report DR risks, gaps and audit remediation to senior leadership
• Lead three GRC analysts across third-party risk, risk registers, maturity assessments, ISO 27001 and NIST CSF
• Report on KPIs and KRIs across ITDR and Cyber GRC

Skills

GRC leadership

IT disaster recovery

Risk management

Stakeholder communication

Education

CISA certification

CBCI or CBCP

Tools

SAP

ERP systems

Job description

We're partnering with a large ASX-listed organisation to hire a Cyber GRC & IT Resilience Team Lead. This is a brand-new role and a genuine greenfield opportunity.

The ITDR Standard and templates are already written. What's needed now is someone to drive them forward and turn them into a working program across Technology.

This role isn't for a GRC all-rounder who has picked up some DR along the way. We're looking for a GRC professional with proven experience establishing DR within an organisation.

You'll act as 2IC to the Head of IT Security and as technical lead to three GRC analysts working across third-party risk, maturity assessments and audit.

What's on offer

• High visibility, with real backing from senior leadership
• A strong budget, including training and certification support
• A supportive, collaborative cyber team
• A largely greenfield DR program: the Standard is written, you make it work

What you'll be doing

• Act as IT Disaster Recovery Coordinator and operationalise the ITDR Standard across Technology
• Coordinate technology teams to build and maintain recovery plans, RTOs/RPOs, dependencies and recovery sequencing
• Prioritise the systems in scope for audit, then tier critical systems.
• Establish and run the DR testing and exercise program, closing the gaps it surfaces
• Work with the enterprise Business Continuity team so ITDR aligns with BIA outcomes
• Track and report DR risks, gaps and audit remediation to senior leadership
• Lead three GRC analysts across third-party risk, risk registers, maturity assessments, ISO 27001 and NIST CSF
• Report on KPIs and KRIs across ITDR and Cyber GRC

What you'll bring

Must-have:

• Proven experience developing and maintaining IT disaster recovery plans, and establishing DR within an organisation
• Solid understanding of RTOs, RPOs and BIAs, plus system tiering and dependency mapping
• Strong GRC background across frameworks such as NIST, ISO 27001 or PCI DSS
• Experience coaching or leading GRC analysts
• Confidence presenting to senior stakeholders in a fast-paced environment

Desirable:

• Retail, healthcare, logistics or critical infrastructure experience
• Certifications such as CBCI, CBCP, ISO 22301, CISA, CISM, CRISC or ISO 27001 LA/LI
• Exposure to SAP and large ERP environments

Essential requirement

Australian work rights, a current driver's licence and a National Police Check are required. Hybrid, typically three days a week on-site.

About Decipher Bureau

Decipher Bureau is Australia's leading cyber security recruitment specialist, partnering with organisations across government, critical infrastructure and enterprise to find and secure exceptional talent. We don't just match skills to a job description. We take the time to understand the technical demands of a role and whether a candidate will genuinely thrive in the team. Because the right placement beats a quick one, every time.