Cyber GRC Platform Lead — Risk Intelligence, Hybrid

Rea Group; Melbourne; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work

Birthday leave

Parental leave

Because We Care program

Hackdays

Job summary

REA Group seeks a senior cyber GRC leader to shape our platform, automate risk reporting and elevate how we measure cyber risk across a product-led tech organisation.

You will lead a distributed team across Australia and India, partner with senior leaders, and drive the selection and implementation of a GRC platform while simplifying compliance. You’ll influence prioritisation and establish security metrics aligned with ISO 27001, PCI-DSS and SOC 2 to deliver clear business value.

Qualifications

• Track record delivering technology-enabled change in GRC, security assurance or risk practices.
• Experience leading distributed or international teams.
• Ability to translate technical security concepts for business audiences.
• Strong communication and influencing skills across senior stakeholders.

Responsibilities

• Lead the development and adoption of a GRC platform.
• Automate compliance evidence collection and risk reporting.
• Measure cyber risk with clear metrics for executive decision-making.
• Oversee the Australian team and coordinate with India-based colleagues.
• Ensure controls align with ISO 27001, PCI-DSS and SOC 2.
• Guide third-party risk processes and security governance.

Skills

GRCsecurity

Team leadership

Stakeholder influence

Security risk assessment

NIST CSF

ISO 27001

Scripting/APIs

Product development awareness

Job description

REA Group seeks a senior cyber GRC leader to shape our platform, automate risk reporting and elevate how we measure cyber risk across a product-led tech organisation.

You will lead a distributed team across Australia and India, partner with senior leaders, and drive the selection and implementation of a GRC platform while simplifying compliance. You’ll influence prioritisation and establish security metrics aligned with ISO 27001, PCI-DSS and SOC 2 to deliver clear business value.