Grc Engineer

Breville; Sydney; On-site; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible work arrangements

Competitive compensation package

A fun and rewarding team environment

ASX-listed company environment

Employee assistance program

Paid parental leave policy

Employee discounts of up to 40% on all

Corporate health and wellness benefits

Job summary

Breville seeks a GRC Engineer to strengthen cybersecurity, privacy, data and AI governance across the tech environment. You will develop automated controls, manage information protection, assurance and risk activities, and drive compliance and remediation.

Essential: 3–5 years in GRC, audit, data governance; experience with GRC platforms and automation. Desirable: CISSP or equivalent, ITIL, PCI DSS familiarity. This role offers flexible work options and a collaborative global team.

Qualifications

• 3–5 years’ experience across GRC, audit, data governance and information protection.
• Hands‑on experience with GRC platforms, compliance automation, control testing and monitoring.
• Experience coordinating audits, security assurance, risk assessment and remediation.
• Knowledge of security frameworks including NIST CSF, Privacy Framework and PCI DSS.

Responsibilities

• Build and maintain GRC and compliance controls across cybersecurity, privacy, data and AI governance.
• Translate policies into measurable, automated controls and continuous monitoring.
• Coordinate audits, evidence collection and remediation processes.
• Maintain control libraries aligned with applicable requirements and frameworks.
• Oversee third‑party risk management and remediation activities.

Skills

GRC expertise

Compliance automation

Control testing

Data governance

Security frameworks

Education

Bachelor's degree in IT / Cybersecurity

Tools

GRC platforms

DLP tools

Job description

GRC Engineer

About Breville

Over the past 90+ years Breville has grown to become an iconic global brand, delivering kitchen products to over 70 countries around the globe. Breville enhances people’s lives through the delivery of brilliant innovation and thoughtful design based on deep consumer insights, empowering people to do things more impressively or easily than they’d thought possible in their own home and ultimately allowing them to “Master Every Moment”.

A career at Breville is truly a one-of-a-kind experience. It’s more than working for a global leader; it’s an opportunity to be a part of something that impacts people all over the world.

About the role

We are seeking an experienced GRC and Compliance Engineering professional to strengthen BRG’s cybersecurity, privacy, data and AI governance capabilities. This role will develop automated controls, manage information protection, assurance and risk activities, and drive compliance and remediation across the technology environment.

Key responsibilities include:

• Build and continuously improve BRG’s GRC and compliance engineering capability across cybersecurity, privacy, data and AI governance.
• Translate policies and frameworks into measurable, automated controls, assurance and continuous compliance monitoring.
• Improve compliance efficiency through automation, evidence collection, control testing and monitoring, risk reporting and streamlined assurance processes.
• Manage cybersecurity and compliance risk, third-party risk, exceptions, findings and remediation.
• Maintain control libraries aligned with NIST CSF, NIST Privacy Framework, NIST AI RMF, PCI DSS and applicable requirements.
• Coordinate cybersecurity, privacy, AI, PCI and financial audits, certification readiness and external assurance.
• Oversee penetration testing, vulnerability assessments, security reviews and remediation through verified closure.
• Engineer and assure information protection and data governance, including classification, sensitivity labelling, DLP, retention and lifecycle management.
• Embed security, privacy, data protection and AI governance into BRG initiatives and solutions.
• Enforce compliance by escalating non-conformance, setting remediation timelines and providing evidence-based assurance.

We’re Interested in Hearing from People Who Have:

Essential:

• Tertiary qualifications in Information Technology, Cybersecurity, Computer Science, Risk, Compliance or a related discipline; or equivalent relevant professional experience.

Desirable:

• Relevant GRC platform, cloud security, PCI DSS or information security management certification.
• CISSP, Microsoft security certifications (SC-200, SC-300, SC-400, AZ-500)
• ITIL V4 Foundation or higher

Professional Experience:
Essential:

• 3–5 years’ experience across GRC, audit, data governance and information protection.
• Hands‑on experience with GRC platforms, compliance automation, control testing and monitoring.
• Experience in enterprise information protection and data governance, including classification, sensitivity labelling and DLP.
• Working knowledge of cybersecurity, privacy, AI governance and compliance frameworks, including NIST CSF and Privacy Framework.
• Experience coordinating audits, security assurance, risk assessment and remediation.
• Ability to implement data protection controls across technical and business teams.
• Experience with browser DLP and Secure Web Gateway controls protecting sensitive data across browsers, web applications and GenAI services.

Desirable:

• Exposure to cloud/security compliance tooling, AI/privacy governance, PCI DSS, security assurance across global environments.
• Enterprise data-platform governance: data classification, access governance, lineage, auditing and browser / Secure Web Gateway (SWG) DLP tooling.

What we offer you:

• Flexible work arrangements
• Competitive compensation package
• A fun and rewarding team environment
• Opportunity to work for an Australian Stock Exchange listed company
• Employee assistance program
• Paid parental leave policy
• Employee discounts of up to 40% on all our electrical products
• Corporate health and wellness benefits

Breville Group is proud to be an Equal Opportunity Employer.