Cyber Security GRC Engineer – Automation & ISO 27001

DroneShield; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

DroneShield is seeking a Cyber Security GRC Engineer to support its ISO 27001 ISMS and governance, risk and compliance programs. The role focuses on audits, evidence management, and scalable security controls across global operations.

You will contribute to framework alignment (ISM, NIST, DISP) and drive automation to streamline compliance workflows, vendor assessments and reporting. This is an engineering role within a GRC function, based at our Sydney headquarters.

Qualifications

• Practical experience in ISO 27001 ISMS, audits or security assurance.
• 3–5 years in GRC, security risk, or related roles.
• Ability to automate compliance tasks using scripting/tools.

Responsibilities

• Support ISO 27001 ISMS operation, audits and evidence tracking.
• Maintain risk registers, controls, evidence and remediation actions.
• Map controls to ISM, NIST, DISP and other frameworks as needed.
• Develop automation for evidence collection, reminders and reporting.
• Collaborate with Procurement, Legal, IT and Engineering on security checks.

Skills

GRC

Security risk

Audit

Automation

Communication

Education

Bachelor's degree in CS/IT or equivalent

Tools

Python

PowerShell

REST APIs

Jira

Power Automate

Job description

DroneShield is seeking a Cyber Security GRC Engineer to support its ISO 27001 ISMS and governance, risk and compliance programs. The role focuses on audits, evidence management, and scalable security controls across global operations.

You will contribute to framework alignment (ISM, NIST, DISP) and drive automation to streamline compliance workflows, vendor assessments and reporting. This is an engineering role within a GRC function, based at our Sydney headquarters.