GRC Engineer - Flexible Compliance & Data Governance

Breville; Sydney; On-site; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible work arrangements

Competitive compensation package

A fun and rewarding team environment

ASX-listed company environment

Employee assistance program

Paid parental leave policy

Employee discounts of up to 40% on all

Corporate health and wellness benefits

Job summary

Breville seeks a GRC Engineer to strengthen cybersecurity, privacy, data and AI governance across the tech environment. You will develop automated controls, manage information protection, assurance and risk activities, and drive compliance and remediation.

Essential: 3–5 years in GRC, audit, data governance; experience with GRC platforms and automation. Desirable: CISSP or equivalent, ITIL, PCI DSS familiarity. This role offers flexible work options and a collaborative global team.

Qualifications

• 3–5 years’ experience across GRC, audit, data governance and information protection.
• Hands‑on experience with GRC platforms, compliance automation, control testing and monitoring.
• Experience coordinating audits, security assurance, risk assessment and remediation.
• Knowledge of security frameworks including NIST CSF, Privacy Framework and PCI DSS.

Responsibilities

• Build and maintain GRC and compliance controls across cybersecurity, privacy, data and AI governance.
• Translate policies into measurable, automated controls and continuous monitoring.
• Coordinate audits, evidence collection and remediation processes.
• Maintain control libraries aligned with applicable requirements and frameworks.
• Oversee third‑party risk management and remediation activities.

Skills

GRC expertise

Compliance automation

Control testing

Data governance

Security frameworks

Education

Bachelor's degree in IT / Cybersecurity

Tools

GRC platforms

DLP tools

Job description

Breville seeks a GRC Engineer to strengthen cybersecurity, privacy, data and AI governance across the tech environment. You will develop automated controls, manage information protection, assurance and risk activities, and drive compliance and remediation.

Essential: 3–5 years in GRC, audit, data governance; experience with GRC platforms and automation. Desirable: CISSP or equivalent, ITIL, PCI DSS familiarity. This role offers flexible work options and a collaborative global team.