GRC & Compliance Engineer: AI & Security Automation

Breville USA, Inc.; Sydney; On-site; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation package

A fun and rewarding team environment

ASX listed company

Employee assistance program

Paid parental leave policy

Employee discounts up to 40% on all at

Corporate health and wellness benefits

Job summary

Breville USA, Inc. is seeking an experienced GRC and Compliance Engineering professional to strengthen BRG’s cybersecurity, privacy, data and AI governance capabilities.

This role will develop automated controls, manage information protection, assurance and risk activities across the technology environment. Key responsibilities include building and improving the GRC and compliance engineering capability, translating policies into automated controls, coordinating audits, and ensuring remediation

Qualifications

• Tertiary qualifications in IT/cybersecurity or related discipline.
• 3–5 years’ experience across GRC, audit, data governance and information protection.
• Hands-on experience with GRC platforms and automation.

Responsibilities

• Build and improve BRG’s GRC and compliance engineering capability across cybersecurity, privacy, data and AI governance.
• Translate policies and frameworks into measurable, automated controls, assurance and continuous compliance monitoring.
• Improve compliance efficiency through automation, evidence collection, control testing and monitoring, risk reporting and streamlined assurance processes.
• Manage cybersecurity and compliance risk, third-party risk, exceptions, findings and remediation.
• Maintain control libraries aligned with NIST CSF, NIST Privacy Framework, NIST AI RMF, PCI DSS and applicable requirements.
• Coordinate cybersecurity, privacy, AI, PCI and financial audits, certification readiness and external assurance.
• Oversee penetration testing, vulnerability assessments, security reviews and remediation through verified closure.
• Engineer and assure information protection and data governance, including classification, sensitivity labelling, DLP, retention and lifecycle management.
• Embed security, privacy, data protection and AI governance into BRG initiatives and solutions.
• Enforce compliance by escalating non-conformance, setting remediation timelines and providing evidence-based assurance.

Skills

GRC platforms

Compliance automation

Control testing

Monitoring

Education

IT/Cybersecurity degree

Job description

Breville USA, Inc. is seeking an experienced GRC and Compliance Engineering professional to strengthen BRG’s cybersecurity, privacy, data and AI governance capabilities.

This role will develop automated controls, manage information protection, assurance and risk activities across the technology environment. Key responsibilities include building and improving the GRC and compliance engineering capability, translating policies into automated controls, coordinating audits, and ensuring remediation