Cyber GRC Specialist for Financial Services ISO 27001

Betashares Capital; Sydney; On-site; AUD 120,000 - 160,000; Full time

Job summary

Betashares Capital is seeking an experienced, hands-on Cyber GRC professional to own governance, risk and compliance across our technology environment in Australia. You will work closely with the Head of IT to ensure information security policies, standards and controls are fit for purpose and meet regulatory obligations.

This role requires strong knowledge of APRA CPS 234 and CPS 230, ISO 27001, and the ability to translate regulatory requirements into practical controls, policies and

Qualifications

• 4+ years in Cyber GRC or Technology Risk governance.
• Experience in financial services with Australian regulations.
• Translate CPS 234/ CPS 230 and ISO 27001 into controls and processes.
• Develop and implement security policies, standards and procedures.
• Audit preparation, evidence management and remediation tracking.
• Independent, proactive contributor with strong collaboration.
• Experience supporting client-facing security and risk assurance is a plus.

Responsibilities

• Own and maintain information security policies, standards and procedures.
• Translate regulatory requirements into practical controls and processes.
• Drive technology risk, cyber governance and compliance initiatives.
• Maintain control frameworks, risk registers and remediation plans.
• Coordinate control assessments, testing and assurance activities.
• Prepare and manage audit and regulatory reviews.
• Identify gaps and implement improvements.
• Support third-party security risk assessments (CPS 230).
• Develop and improve GRC workflows, reporting and evidence management.
• Partner with stakeholders to ensure security and compliance understood and maintained.
• Provide clear reporting on compliance activities and risks.

Skills

Cyber GRC

Technology Risk

Information Security

APRA CPS 234

CPS 230

ISO 27001

Policy Development

Controls Implementation

Audit Preparation

Evidence Management

Board Reporting

Stakeholder Engagement

Independent Work

Tools

ServiceNow IRM

Vanta

Drata

Job description

Betashares Capital is seeking an experienced, hands-on Cyber GRC professional to own governance, risk and compliance across our technology environment in Australia. You will work closely with the Head of IT to ensure information security policies, standards and controls are fit for purpose and meet regulatory obligations.

This role requires strong knowledge of APRA CPS 234 and CPS 230, ISO 27001, and the ability to translate regulatory requirements into practical controls, policies and