GRC Engineer: Automate Compliance & Data Protection

Breville | Sage; Sydney; On-site; AUD 120,000 - 170,000; Full time

Benefits offered by this job

Competitive compensation

Fun team environment

ASX-listed company

Employee assistance program

Paid parental leave

Employee discounts up to 40%

Health and wellness benefits

Job summary

Breville in Sydney, Australia, seeks an experienced GRC and Compliance Engineering professional to strengthen cybersecurity, privacy, data and AI governance capabilities. The role develops automated controls, manages information protection, assurance and risk activities across the technology environment.

You will translate policies into measurable controls, drive continuous compliance monitoring, manage third-party risk, and coordinate audits and certification readiness.

Qualifications

• Tertiary qualifications in Information Technology, Cybersecurity, Computer Science, Risk, Compliance or related discipline; or equivalent experience.
• Relevant GRC platform, cloud security, PCI DSS or information security management certification.
• CISSP, Microsoft security certifications (SC-200, SC-300, SC-400, AZ-500).
• ITIL V4 Foundation or higher

Responsibilities

• Build and strengthen BRG's GRC and compliance engineering capability across cybersecurity, privacy, data and AI governance.
• Translate policies and frameworks into measurable, automated controls, assurance and continuous compliance monitoring.
• Improve compliance efficiency through automation, evidence collection, control testing and monitoring, risk reporting and streamlined assurance processes.
• Manage cybersecurity and compliance risk, third-party risk, exceptions, findings and remediation.
• Maintain control libraries aligned with NIST CSF, NIST Privacy Framework, NIST AI RMF, PCI DSS and applicable requirements.
• Coordinate cybersecurity, privacy, AI, PCI and financial audits, certification readiness and external assurance.
• Oversee penetration testing, vulnerability assessments, security reviews and remediation through verified closure.
• Engineer and assure information protection and data governance, including classification, sensitivity labelling, DLP, retention and lifecycle management.
• Embed security, privacy, data protection and AI governance into BRG initiatives and solutions.
• Enforce compliance by escalating non-conformance, setting remediation timelines and providing evidence-based assurance.

Skills

GRC

Audit

Data governance

AI governance

NIST CSF

Privacy governance

PCI DSS

Education

Tertiary qualification in IT/Cybersecurity

Tools

GRC platforms

Cloud security

Job description

Breville in Sydney, Australia, seeks an experienced GRC and Compliance Engineering professional to strengthen cybersecurity, privacy, data and AI governance capabilities. The role develops automated controls, manages information protection, assurance and risk activities across the technology environment.

You will translate policies into measurable controls, drive continuous compliance monitoring, manage third-party risk, and coordinate audits and certification readiness.