Cyber GRC & Risk Specialist — Hybrid Sydney

IBC Recruitment; Sydney; Hybrid; AUD 120,000 - 180,000; Full time

Job summary

IBC Recruitment is seeking an experienced Cyber Security GRC / Risk Specialist for Sydney, offering hybrid work arrangements. The role focuses on governance, risk management, compliance, and assurance across security frameworks with exposure to senior stakeholders.

You will conduct risk assessments, develop policies and controls, and support audits while coordinating with technology and business teams to strengthen security capabilities.

Qualifications

• 3+ years in Cyber Security, Information Security, GRC, Risk or Assurance.
• Strong understanding of cyber security governance, risk and control frameworks.
• Experience with ISO 27001, NIST, Essential Eight or similar.
• Proven ability to assess and communicate technical and cyber security risks.

Responsibilities

• Conduct cyber security risk assessments across technology, projects and business initiatives.
• Develop and maintain security policies, standards, procedures and controls.
• Support compliance with frameworks including ISO 27001, NIST and Essential Eight.
• Undertake security assurance and control assessments.
• Identify, assess and communicate information security risks.
• Support third-party and supplier cyber security risk assessments.
• Prepare risk reporting and provide clear recommendations to senior stakeholders.
• Work with technical teams to assess the effectiveness of security controls.
• Support internal and external audit and compliance activities.
• Contribute to continuous improvement across cyber security governance and risk practices.

Skills

Cyber security governance

Risk assessment

GRC

Assurance

ISO 27001

NIST

Essential Eight

Stakeholder engagement

Communication

Job description

IBC Recruitment is seeking an experienced Cyber Security GRC / Risk Specialist for Sydney, offering hybrid work arrangements. The role focuses on governance, risk management, compliance, and assurance across security frameworks with exposure to senior stakeholders.

You will conduct risk assessments, develop policies and controls, and support audits while coordinating with technology and business teams to strengthen security capabilities.