Cyber Security GRC

IBC Recruitment; Sydney; Hybrid; AUD 120,000 - 180,000; Full time

Job summary

IBC Recruitment is seeking an experienced Cyber Security GRC / Risk Specialist for Sydney, offering hybrid work arrangements. The role focuses on governance, risk management, compliance, and assurance across security frameworks with exposure to senior stakeholders.

You will conduct risk assessments, develop policies and controls, and support audits while coordinating with technology and business teams to strengthen security capabilities.

Qualifications

• 3+ years in Cyber Security, Information Security, GRC, Risk or Assurance.
• Strong understanding of cyber security governance, risk and control frameworks.
• Experience with ISO 27001, NIST, Essential Eight or similar.
• Proven ability to assess and communicate technical and cyber security risks.

Responsibilities

• Conduct cyber security risk assessments across technology, projects and business initiatives.
• Develop and maintain security policies, standards, procedures and controls.
• Support compliance with frameworks including ISO 27001, NIST and Essential Eight.
• Undertake security assurance and control assessments.
• Identify, assess and communicate information security risks.
• Support third-party and supplier cyber security risk assessments.
• Prepare risk reporting and provide clear recommendations to senior stakeholders.
• Work with technical teams to assess the effectiveness of security controls.
• Support internal and external audit and compliance activities.
• Contribute to continuous improvement across cyber security governance and risk practices.

Skills

Cyber security governance

Risk assessment

GRC

Assurance

ISO 27001

NIST

Essential Eight

Stakeholder engagement

Communication

Job description

Cyber Security GRC / Risk Specialist
Contract & Permanent Opportunities
Sydney | Hybrid
Cyber Security | GRC | Risk | Assurance

We are seeking experienced Cyber Security GRC and Risk professionals to connect with leading organisations across Sydney. This is an opportunity for professionals with experience across cyber governance, security risk, assurance, compliance and information security frameworks.

You will play a key role in supporting cyber security governance and risk management, working closely with technology, security and business stakeholders to assess risk and strengthen organisational security capabilities.

Key Responsibilities:

• Conduct cyber security risk assessments across technology, projects and business initiatives
• Develop and maintain security policies, standards, procedures and controls
• Support compliance with frameworks including ISO 27001, NIST and Essential Eight
• Undertake security assurance and control assessments
• Identify, assess and communicate information security risks
• Support third-party and supplier cyber security risk assessments
• Prepare risk reporting and provide clear recommendations to senior stakeholders
• Work with technical teams to assess the effectiveness of security controls
• Support internal and external audit and compliance activities
• Contribute to continuous improvement across cyber security governance and risk practices

Required Skills & Experience:

• 3+ years’ experience within Cyber Security, Information Security, GRC, Risk or Assurance
• Strong understanding of cyber security governance, risk and control frameworks
• Experience with frameworks such as ISO 27001, NIST, Essential Eight or similar
• Proven ability to assess and communicate technical and cyber security risks
• Strong stakeholder engagement skills across technology and business teams
• Excellent written and verbal communication skills
• Relevant cyber security, risk or information security certifications are advantageous